This is an old revision of the document!
Table of Contents
Provenance: Research of Specific Large Platforms
Working log behind platforms. Every figure on that page has its query here, with its own denominator; every fold has its alias rules and its unmapped residue printed in full; every external claim has the URL, the verbatim quote and the fetch date, including the ones that could not be verified. Corpus-level caveats — the seven-venue scope, the provisional 2025–2026 slice, field-by-field stability — are on corpus and are not restated here.
This is a working log, not prose. It is written for somebody checking a number.
The run
| Date | 2026-08-27 |
| Corpus | data/extract/run1/extractions.jsonl, 5,859 extracted papers, 7 venues (CCS, IMC, NDSS, PETS, USENIX Security, TheWebConf, IEEE S&P), 2010–2026 |
| Full text available | 5,855 of 5,859 papers have paper.cols.txt |
| Page status | created, not extended. Neither design:platforms nor any of the four promised sub-pages existed; confirmed against node scripts/sitemap.mjs and node scripts/dw.mjs pages |
| Scripts added | scripts/plat_fold.mjs, scripts/platforms_report.mjs, scripts/platforms_fulltext.mjs, scripts/platforms_named_probe.mjs, scripts/platforms_audit.mjs, scripts/platforms_quotecheck.mjs |
| Bibliography | 24 new entries appended to bibliography; one candidate key (cheng2020_dangerous) was already present with the same DOI and was reused rather than duplicated |
| Model | Claude Opus 5 for the corpus work, page and this log; two Claude Sonnet sub-agents for external fact-finding (platform access status; DSA and case law), then every load-bearing claim re-fetched by the main agent |
| Discussion block | No ~~DISCUSSION~~ on this page, by the convention that comments belong on the content page. This is the first provenance page written in this run; the decision is recorded here rather than assumed |
Scope and judgement calls
- Why a parent page and not four company pages. start promised
design:platformsplus Facebook, Twitter, TikTok and Amazon sub-pages. We wrote the parent and no sub-pages, and removed the four red links. The evidence is the audit table below: TikTok is 4 genuine papers, Amazon's candidate set is 36% precise and splits into two unrelated objects, and the Twitter/X body was produced almost entirely by an access route that no longer exists. The reasoning is published on the content page under Should There Be Facebook, Twitter, TikTok and Amazon Pages? so a future editor can overturn it on evidence rather than re-deriving it. - Why the page is organised by access route, not by company. What transfers between platform studies is the route in and the denominator it implies; what goes stale fastest is a company's current API surface. Organising by company would have guaranteed the page was wrong within a year.
- A reasonable person could disagree about Twitter/X. 142 candidates at 73% precision is the largest coherent body in the corpus and would support a page. We judged that a page about a closed API is a history page, and folded the transferable material (metered APIs, dataset reuse, the visibility-score work) into the parent. If the DSA route opens X data again, that judgement should be revisited.
- One page the evidence supports is not on the promised list: ad-transparency archives as a measurement instrument (69 papers, a live regulatory driver, real two-sided error characteristics). It is named on the content page as a candidate but deliberately not linked, so the page does not create a fresh red link while removing four.
- What we did not put on the page. US scraping case law. Both sub-agents returned consistent accounts of hiQ v LinkedIn and the Bright Data cases, but neither could read a primary opinion (CourtListener and Justia returned 403; the SCOTUS and Ninth Circuit PDFs did not parse). Publishing case outcomes on a methods wiki from law-firm summaries alone is exactly the failure mode this process exists to prevent, so the page says the position is moving, points at the one decision we did verify against a primary source (the Commission's X decision), and tells the reader to talk to their institution. See Rejected below.
The inclusion rule
Fixed before the first figure was computed.
A paper counts as measuring platform P if P is matched, with role subject, in at least one of four signals:
titlepopulation[].sourceListdetection[].phenomenontools[].namewhereusedOrMentionedisusedorproduced
Roles that do not count: recruitment, infrastructure, mlservice, ranking, operator, benchmark, falsepos.
Paper-level correction: for a paper with at least one participants tuple, a sourceList match alone does not count — a qualitative study lists its recruitment channels there.
How the fold got to that rule: six iterations, each of which moved a headline number
This is the most useful thing on this page. Each step below produced a number that looked publishable and was wrong.
| # | What we did | What it produced | Why it was wrong |
|---|---|---|---|
| 1 | substring match on population[].sourceList only | Amazon 176 papers | 51 papers give their population as the bare string Alexa — the retired top-sites ranking list — and ~110 as Amazon Mechanical Turk. Neither is Amazon-the-platform. |
| 2 | added role rules (recruitment, infrastructure, mlservice, ranking) | Amazon subject 57, ranking 475, recruitment 110 | Better, but the ranking rule required a qualifier (Alexa top, Alexa 1M). Bare Alexa still fell through to subject. Fixed by making any unqualified Alexa the ranking list unless it names a skill, a voice device or the skill store. |
| 3 | recall check: matched paper titles against the sourceList verdict | TikTok fell to 2 | sourceList badly under-recalls. The TheWebConf 2024 TikTok feed study gives its population as custom bot accounts and never names TikTok there. Widened to four signals. |
| 4 | four signals, first cut | Amazon 923 papers | Bug in platforms_report.mjs: it accepted any tag plat_fold.tagsOf() returned, and tagsOf returns the role rather than filtering on it. So every Mechanical Turk and EC2 mention counted. Fixed by filtering role === 'subject' at the call site. |
| 5 | four signals + role filter | 1,072 platform-subject papers; Twitter/X 165, Meta 186 | Qualitative studies list Twitter as a recruitment channel in sourceList — e.g. "professional networks, Reddit, Twitter, Slack, and Upwork" and "LinkedIn, Upwork, Discord, Slack, Twitter". A lexical rule cannot separate those reliably. |
| 6 | added the paper-level participants correction | 897 platform-subject papers; Twitter/X 142, Meta 151 | This is what is published. |
Numbers 176, 923 and 1,072 are recorded here because all three would have read as authoritative on a page.
Every query, with its denominator
Full unedited output of node scripts/platforms_report.mjs:
- platforms_report-output.txt
============================================================================== design:platforms — report script corpus: 5859 extracted papers, 7 venues, 2010-2026 ============================================================================== ## Denominators all extracted papers 5859 platforms includes 'other-online-service' 2429 (41.5% of all) platforms includes 'web' 1622 (27.7% of all) ran a crawl (crawlConfig or studyType, per OVERVIEW) 1120 (19.1% of all) drew a study population 5712 named >=1 large platform as SUBJECT of measurement 897 (15.7% of the 5712 that drew a population) ## Papers measuring a named large platform (role=subject), of 5712 papers that drew a study population rank papers share family 1 323 5.7% Google (Play/Search/Ads) 2 151 2.6% Meta (Facebook/Instagram/WhatsApp) 3 142 2.5% Twitter/X 4 72 1.3% Amazon 5 63 1.1% YouTube 6 63 1.1% Reddit 7 56 1.0% Apple App Store 8 50 0.9% WeChat/Weibo/QQ 9 24 0.4% Telegram 10 17 0.3% Yelp 11 16 0.3% LinkedIn 12 11 0.2% Flickr 13 10 0.2% Steam 14 10 0.2% Mastodon 15 8 0.1% Discord 16 8 0.1% Netflix 17 7 0.1% TikTok 18 7 0.1% Twitch 19 6 0.1% eBay 20 3 0.1% Airbnb 21 3 0.1% Spotify 22 2 0.0% Uber 23 1 0.0% Snapchat ## The four platforms [[start]] names, by the ROLE the name plays in population.sourceList (sourceList only — a paper can still be a subject paper via title/phenomenon/tool, which is why "subject" here is lower than the ranking above.) family subject recruit infra mlsvc ranking operator Meta (Facebook/Instagram/WhatsApp) 63 54 1 0 0 2 Twitter/X 84 34 0 0 1 0 TikTok 0 2 0 0 0 1 Amazon 39 179 23 3 412 0 ## Per-year paper counts, role=subject (2025-2026 provisional: see literature:corpus) year corpus Google (Play Meta (Facebo Twitter/X Amazon YouTube Reddit Apple App St WeChat/Weibo 2010 119 1 4 2 0 4 0 0 0 2011 116 1 3 6 2 4 0 0 1 2012 151 2 7 9 2 0 0 0 1 2013 125 12 7 8 1 0 0 2 1 2014 166 15 7 3 1 0 0 2 0 2015 190 17 6 4 1 1 0 2 0 2016 182 15 6 5 0 2 1 1 0 2017 231 17 4 3 0 1 0 0 1 2018 254 15 7 5 3 3 2 0 0 2019 402 30 13 17 4 2 6 3 5 2020 404 24 14 8 8 2 5 4 5 2021 379 28 7 9 4 1 2 5 5 2022 546 33 9 16 8 8 5 12 7 2023 719 34 19 16 14 7 8 10 9 2024 690 21 11 10 9 9 10 4 3 2025 770 33 20 13 9 11 18 7 9 2026 415 25 7 8 6 8 6 4 3 ## Twitter/X and Meta as subject, 3-year buckets, as a share of that bucket's corpus bucket corpus Twitter/X Meta TikTok 2010-2012 386 17 ( 4.4%) 14 ( 3.6%) 0 ( 0.0%) 2013-2015 481 15 ( 3.1%) 20 ( 4.2%) 0 ( 0.0%) 2016-2018 667 13 ( 1.9%) 17 ( 2.5%) 0 ( 0.0%) 2019-2021 1185 34 ( 2.9%) 34 ( 2.9%) 0 ( 0.0%) 2022-2024 1955 42 ( 2.1%) 39 ( 2.0%) 5 ( 0.3%) 2025-2026* 1185 21 ( 1.8%) 27 ( 2.3%) 2 ( 0.2%) * 2025-2026 is provisional: CCS 2026 and IMC 2026 have not been held, and IEEE S&P 2026 / WWW 2026 abstracts are not in OpenAlex, so selection under-covers them. ## How the 897 platform-subject papers obtained the data (temporal.mode, paper-counted, multi-valued) existing-dataset 383 42.7% live-crawl 346 38.6% active-probing 224 25.0% passive-collection 170 19.0% web-archive 17 1.9% (no stated mode) 60 6.7% EXCLUSIVE split of the same 897 papers: existing-dataset ONLY (no primary collection) 208 23.2% primary collection ONLY (no existing dataset) 453 50.5% both 175 19.5% any primary collection 628 70.0% ## Did they use the platform's official API, or scrape? (tools[].name over the 897 platform-subject papers) names an API-shaped tool 236 26.3% names a scraping/automation tool 157 17.5% both 48 5.4% neither (no tool named for it) 552 61.5% NB: this is a keyword split over free-text tool names, not an enum. Report as a ranking. ## The login wall: crawlConfig.authentication platform-subject papers with a crawlConfig object (260) none 145 55.8% not-stated 89 34.2% account-registration 22 8.5% manual-login 4 1.5% -> states a value: 171/260 = 65.8% all papers with a crawlConfig object (1080) none 689 63.8% not-stated 301 27.9% account-registration 45 4.2% manual-login 27 2.5% automated-login 17 1.6% sso 1 0.1% -> states a value: 779/1080 = 72.1% ## Rules of engagement: robots.txt and ethics review platform-subject papers with a crawlConfig object (260): says anything about robots.txt: 14 5.4% all papers with a crawlConfig object (1080): says anything about robots.txt: 51 4.7% platform-subject empirical papers (841): states an ethics-review outcome: 273 32.5% all empirical papers (5118): states an ethics-review outcome: 1728 33.8% ## Artifact availability (artifacts.availability), platform-subject empirical papers vs all empirical platform-subject empirical (841) public 381 45.3% none-mentioned 332 39.5% absent 42 5.0% promised-not-yet-available 38 4.5% on-request 21 2.5% restricted 17 2.0% explicitly-withheld 10 1.2% all empirical (5118) public 2439 47.7% none-mentioned 1964 38.4% absent 264 5.2% promised-not-yet-available 240 4.7% on-request 86 1.7% restricted 73 1.4% explicitly-withheld 52 1.0% ## Study size (population.n on the platform-subject tuple), where stated Twitter/X tuples with n: 189 min 4 median 90332 max 8700000000 Meta (Facebook/Instagram/WhatsApp) tuples with n: 116 min 6 median 43953 max 118000000000 Amazon tuples with n: 65 min 1 median 1880 max 80000000 TikTok tuples with n: 0 min - median - max - ## detection[] tuples carrying a prevalence, on the platform-subject papers papers with >=1 detection tuple with a non-null prevalence: 866 96.5% of 897 ## Laws assessed on platform-subject papers platform-subject papers that assessed a law: 96 10.7% GDPR 62 CCPA 19 COPPA 17 ePrivacy Directive 4 CalOPPA 3 Digital Services Act (DSA) 3 Children's Online Privacy Protection Act (COPPA) 2 Computer Fraud and Abuse Act (CFAA) 2 FERPA 2 LGPD 2 ## Fold audit distinct population.sourceList strings matching a platform token: 1174 role=subject 515 distinct strings role=ranking 331 distinct strings role=recruitment 295 distinct strings role=infrastructure 26 distinct strings role=operator 4 distinct strings role=mlservice 2 distinct strings role=falsepos 1 distinct strings full string-by-string assignment: node scripts/platforms_report.mjs --dump ## Named access routes on the 897 platform-subject papers (tools[] used/produced, paper-counted) platform REST/search API (any platform) 230 25.6% 2010:4 2011:10 2012:7 2013:6 2014:2 2015:6 2016:5 2017:5 2018:6 2019:20 2020:13 2021:18 2022:29 2023:22 2024:27 2025:30 2026:20 Twitter/X streaming or search API 91 10.1% 2010:2 2011:6 2012:4 2013:4 2014:1 2015:3 2016:2 2017:1 2018:2 2019:8 2020:5 2021:7 2022:12 2023:11 2024:8 2025:8 2026:7 Tweepy / twarc / twitter client lib 1 0.1% 2019:1 Facebook/Meta Graph or Marketing API 7 0.8% 2012:1 2013:1 2019:1 2020:1 2022:1 2024:1 2025:1 Meta / Facebook Ad Library 5 0.6% 2020:1 2022:1 2023:2 2024:1 CrowdTangle 5 0.6% 2022:1 2023:1 2025:2 2026:1 Pushshift (Reddit archive) 13 1.4% 2020:1 2022:2 2023:4 2024:4 2025:2 Reddit API / PRAW 14 1.6% 2022:2 2023:2 2024:1 2025:6 2026:3 YouTube Data API 18 2.0% 2010:1 2011:2 2015:1 2018:1 2019:1 2021:1 2022:2 2024:3 2025:2 2026:4 TikTok API / TikTok-Api 1 0.1% 2024:1 Instagram API / scraper 6 0.7% 2017:1 2018:1 2020:1 2022:1 2024:1 2025:1 generic browser automation 80 8.9% 2014:3 2015:2 2016:1 2017:7 2018:2 2019:7 2020:5 2021:7 2022:8 2023:13 2024:6 2025:12 2026:7 custom scraper / crawler 86 9.6% 2010:2 2011:2 2012:1 2013:3 2014:2 2016:1 2017:2 2018:3 2019:9 2020:8 2021:4 2022:13 2023:10 2024:8 2025:10 2026:8 NB: free-text tool names, matched by regex. Rankings only, never a precise share. ## What the 897 platform-subject papers measure (detection.phenomenon, folded into families, paper-counted) spam / abuse / fraud accounts 79 8.8% misinformation / content moderation 42 4.7% advertising / targeting / ad delivery 70 7.8% tracking / third-party data flows 109 12.2% privacy settings / user disclosure 35 3.9% recommendation / personalisation / feed 24 2.7% account security / hijacking / auth 63 7.0% deletion / data subject rights / compliance 30 3.3% network / infrastructure performance 98 10.9% app / store / SDK analysis 79 8.8% RESIDUE: papers with detection tuples matching no family above: 415 46.3% residue sample (first 15 phenomena): [IMC 2010] Graph-characteristic estimation accuracy [CCS 2010] coordinated malicious wall posts [IMC 2010] UMTS RRC state transitions and timers [IMC 2010] YouTube data-center locations [WWW 2010] TOC diversity and accuracy [CCS 2011] search-result cloaking [CCS 2011] malware in trending-term results [IMC 2011] YouTube uploader population [IMC 2011] Total number of YouTube videos [IMC 2011] segment transmission delay [IMC 2011] URL propagation cascades [USENIX 2011] search-redirection attacks [CCS 2012] giant connected component [CCS 2012] malware infection [IMC 2012] Facebook gifting application activity
Full unedited output of node scripts/platforms_fulltext.mjs (full-text keyword probes over the 897 platform-subject papers, with the whole corpus as the comparison set):
- platforms_fulltext-output.txt
# platform-subject papers: 897 (from platforms_report.mjs --keys) # of those, with paper.cols.txt on disk: 897 ## ratelimit /rate[- ]?limit(ed|ing|s)?\b/i platform-subject: 107/897 = 11.9% | all papers with text: 563/5855 = 9.6% [IMC 2010] … e when user-ids are sparsely populated (low hit-to-miss ratio) and queries are subject to resource constraints (e.g., queries are rate-limited in Flickr, Livejournal [26], and Bittorrent [18]). In a P2P network like Bittorrent, a client can randomly sample pee … [IMC 2011] … er hour did you also see a drop in the overall number of ID's that you saw per hour. If yes then this might mean that YouTube was rate limiting your crawler, leaving open the possibility that you have not seen all the uploaders. Reviewer #2 Strengths: While si … [IMC 2011] … user may never query the directory node so frequently (every 3s). I'm actually surprised that Skype does not enforce any kind of rate limiting on this. As mentioned by the authors, there's an even stronger assumption (which is more like a bug) -- Even though … per year (hits/platform-subject with text): 2010:1/11 2011:5/18 2012:2/25 2013:4/29 2014:3/30 2015:5/28 2016:2/24 2017:3/30 2018:5/35 2019:9/80 2020:9/67 2021:7/53 2022:8/99 2023:9/115 2024:7/83 2025:15/108 2026:13/62 ## tos /terms of service|terms of use\b|acceptable use policy|\bToS\b/i platform-subject: 134/897 = 14.9% | all papers with text: 455/5855 = 7.8% [IMC 2010] … y test. Clicking the malicious link directs the victim to a site that asks them to provide their cellphone number and agree to a "terms of service" before they can see the results of the love compatibility test. If the victim proceeds, she is automatically sig … [IMC 2011] … mpaign. A second form of spam-as-a-service includes programs that specialize in the sale of Twitter accounts, violating Twitter's Terms of Service [25]. A number sites including xgcmedia.com and backlinksvault.com purport to register accounts with unique email … [NDSS 2013] … th pro- files in Table 2. Legitimate users have more photo albums and profile photos, while Sybils have more censored pho- 100 12 tos. The "News-Feed" column shows the average number of items in the first 5 chronological pages of each user's newsfeed. On Faceb … per year (hits/platform-subject with text): 2010:1/11 2011:1/18 2012:0/25 2013:1/29 2014:4/30 2015:3/28 2016:5/24 2017:2/30 2018:8/35 2019:5/80 2020:10/67 2021:11/53 2022:11/99 2023:16/115 2024:16/83 2025:24/108 2026:16/62 ## sockpuppet /sock[- ]?puppet/i platform-subject: 14/897 = 1.6% | all papers with text: 26/5855 = 0.4% [WWW 2012] … roup of reviewers, we mean a set of reviewer-ids. The actual reviewers behind the ids could be a single person with multiple ids (sockpuppet), multiple persons, or a combination of both. We do not distinguish them in this work. Before proceeding further, let u … [CCS 2019] … USA ishtiaque@cs.toronto.edu carbunar@gmail.com ABSTRACT Black Hat App Search Optimization (ASO) in the form of fake reviews and sockpuppet accounts, is prevalent in peer-opinion sites, e.g., app stores, with negative implications on the digital and real live … [WWW 2019] … onference on Web Science. ACM, 249-258. [24] Srijan Kumar, Justin Cheng, Jure Leskovec, and VS Subrahmanian. 2017. An army of me: Sockpuppets in online discussion communities. In Proceedings of the 26th International Conference on World Wide Web. International … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:1/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:3/80 2020:0/67 2021:0/53 2022:1/99 2023:3/115 2024:1/83 2025:3/108 2026:2/62 ## donation /data donation|donated (their )?data|data[- ]donating/i platform-subject: 6/897 = 0.7% | all papers with text: 25/5855 = 0.4% [WWW 2019] … Voter on Twitter. In ACM Conference on Human Factors in Computing Guardian. http://bit.ly/2DluqbV, 2012. Systems (CHI), 2017. [3] Data donation - German Parliamentary Election 2017. http://bit.ly/2t9QcLf, 2017. [24] T. Libert. Exposing the Invisible Web: An An … [PETS 2023] … nt to gather data from a wider range of sources, such as direct observations of privacy management behavior (e.g., through TikTok data donations). Based on our findings, future research could develop and systematically test privacy interventions based on the B … [WWW 2024] … ld traces dataset, obtained by Zannettou et al. [24], was collected after obtaining explicit consent from the participants before data donation. Also, the video metadata collection focuses on publicly accessible videos at the time of data collection (i.e., we … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:1/80 2020:0/67 2021:0/53 2022:0/99 2023:1/115 2024:1/83 2025:1/108 2026:2/62 ## captcha /CAPTCHA/i platform-subject: 62/897 = 6.9% | all papers with text: 313/5855 = 5.3% [IMC 2010] … counts. These Sybil accounts are "fake" in the sense that they do not represent a real person. Despite the use of mechanisms like CAPTCHAs, account registration is still relatively easy to automate, and attackers can potentially create a large number of accoun … [IMC 2011] … ellers reveal a fledgling market where spammers with content to advertise can obtain access to Twitter accounts without requiring CAPTCHA solvers or other tools to enable automated account creation. 6. SPAM CAMPAIGNS In this section, we explore five major spam … [CCS 2012] … order to mitigate attack damage and to prevent new attacks. Notable examples of such restrictions include aggressively requiring CAPTCHA tests every now and then (not just for account creation), and limiting the number of outgoing emails [3]. Unfortunately, s … per year (hits/platform-subject with text): 2010:1/11 2011:2/18 2012:3/25 2013:4/29 2014:3/30 2015:3/28 2016:0/24 2017:4/30 2018:3/35 2019:1/80 2020:1/67 2021:5/53 2022:9/99 2023:6/115 2024:7/83 2025:7/108 2026:3/62 ## researchapi /research(er)?[- ]api|academic (research )?(product )?track|Academic API|Meta Content Library|Researcher Platform|TikTok Research/i platform-subject: 8/897 = 0.9% | all papers with text: 11/5855 = 0.2% [CCS 2022] … line of SpamHunter. Tweet collector. Our pipeline starts from collecting users' tweets. For this purpose, we utilized the Twitter Academic API 1 , which allows us to search for tweets using complicated query terms. We then composed a query as below to find spa … [WWW 2022] … ue warning labels (Appendix, Figure 4). Having obtained the ids of Trump's tweets, we used the full-archive endpoint of Twitter's researcher API, and collected the reply count to each of these tweets. We also collected a stratified sample of the actual replies … [IMC 2023] … nitial tweet (con- much lower than their performance against self-hosted phishing taining the phishing link), we used the Twitter Academic API [6] attacks (74.2% coverage and median response time of 51 minutes). to check if the tweet had been deleted at regula … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:0/67 2021:0/53 2022:2/99 2023:1/115 2024:1/83 2025:3/108 2026:1/62 ## dsa /Digital Services Act|Article 40(\(|\s|,)/ platform-subject: 15/897 = 1.7% | all papers with text: 31/5855 = 0.5% [CCS 2023] … orbidden, or restricted. In particular, we examine the Children's Online Privacy Protection Rule (COPPA) in the U.S. [23] and the Digital Services Act, a new Regulation voted on 19 October 2022 at the European Union level [46]. The COPPA Act does not prohibit … [IMC 2024] … l advertising policies across 16 European Union countries. Leveraging a comprehensive dataset provided by Meta under the European Digital Services Act, encompassing all ads targeting EU countries, our analysis exposes shortcomings in Meta's ad moderation. In p … [WWW 2024] … 14, 22]. In response, policymakers stepped in to address these growing concerns. In fact, the recently passed EU legislation, the Digital Services Act (DSA) [5] emphasizes the importance of algorithmic transparency and calls for audits of algorithmic feeds. He … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:0/67 2021:0/53 2022:0/99 2023:1/115 2024:2/83 2025:4/108 2026:8/62 ## crowdtangle /CrowdTangle/i platform-subject: 5/897 = 0.6% | all papers with text: 6/5855 = 0.1% [USENIX 2022] … IP code). • We retrieve manually curated Explore lists [86] containing political, government, media, and issue-related pages from CrowdTangle [29] (matched on page ID). • We enumerate the most common Facebook page categories for pages within the previous data … [IMC 2023] … er services, we documented a rising trend in these attacks over a two-year period. Using the official Twitter API [95] and Meta's CrowdTangle [13], we compiled 3.1 million URLs from Twitter and 1.4 million URLs from Facebook that contained distinct second-leve … [WWW 2025] … or messages containing specific election-related keywords (see Appendix A). Facebook data was collected through (the now defunct) Crowdtangle, which offered access to public posts of groups and pages. For X, we gather publicly available information, including … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:0/67 2021:0/53 2022:1/99 2023:1/115 2024:0/83 2025:2/108 2026:1/62 ## adarchive /Ad Library API|(Facebook|Meta|Google|Twitter|TikTok|X)['\u2019]?s? (Ad|Advert\w+) (Library|Archive)|Ad(vert\w+)? Transparency (Cent|Report|Tool)|Political Ad(vert\w+)? (Library|Archive)/ platform-subject: 14/897 = 1.6% | all papers with text: 18/5855 = 0.3% [PETS 2020] … site of "Tom's Hardware Guide-IT Pro" app has more than 10 million unique monthly visitors. 4.3 Misuse Detection Using Facebook's Ad Transparency Tool CanaryTrap also uses Facebook's ad transparency tool [75] as the monitoring channel to detect potential misus … [USENIX 2020] … Internet Behavioral Advertising Practices. In Proc. WPES, 2010. [43] Jeremy B. Merrill and Ariana Tobin. Facebook Moves to Block Ad Transparency Tools - Including Ours. ProPublica, January 28, 2019. https: //www.propublica.org/article/facebook- blocks-ad-tran … [WWW 2020] … ystem that shows the ads identified as related to politics. We noticed that not all political ads we detected were present in the Facebook Ad Library for political ads. Our results emphasize the importance of enforcement mechanisms for declaring political ads … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:4/67 2021:0/53 2022:3/99 2023:4/115 2024:1/83 2025:0/108 2026:2/62 ## pushshift /Pushshift/i platform-subject: 31/897 = 3.5% | all papers with text: 35/5855 = 0.6% [IMC 2018] … d via a voting system based on the up- and down-votes users cast. We gather images from Reddit using publicly available data from Pushshift [62]. We parse all submissions and comments1 between July 1, 2016 and July, 31 2017, and extract 62M posts that contain … [WWW 2019] … 2000. Community Building on the Web: Secret Strategies for Successful [5] Baumgartner, J. 2018. Reddit repository. https://files.pushshift.io/reddit/ [Online; Online Communities (1st ed.). Addison-Wesley Longman Publishing Co., Inc. accessed 02-November-2018] … [WWW 2019] … 6AnAnarchive archiveofofReddit Redditposts postsand andcomments commentsisispublicly publiclyavailable availableatathttps://files.pushshift. https://files.pushshift. be where influenced) online by real-world discussion external spread could events e.g., market … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:1/35 2019:3/80 2020:3/67 2021:1/53 2022:3/99 2023:5/115 2024:5/83 2025:9/108 2026:1/62 ## dsar /right of access|subject access request|\bDSAR\b/i platform-subject: 14/897 = 1.6% | all papers with text: 52/5855 = 0.9% [USENIX 2020] … es are rarely available, prior work focuses heavily on abstract opinions about hypothetical scenarios. We leverage data subjects' right of access to data collected about them (recently strengthened by laws like GDPR and CCPA) to take a more comprehensive and e … [PETS 2022] … ). process such requests. 23 (55%) companies do not pro-In terms of processing sensitive data of children vide any information on subject access requests. Regard- i. e., minors, under the age of 13 years ("Processing of ing data retention, 16 (38%) companies d … [PETS 2023] … th these principles by opers comply with the provisions of the CCPA that require them posting privacy policies and responding to "subject access requests" to provide consumers with accurate privacy notices and respond (SARs) from consumers (known as "verifiabl … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:1/67 2021:0/53 2022:2/99 2023:2/115 2024:3/83 2025:3/108 2026:3/62 ## apikey /API (key|credentials|token)|developer account|elevated access/i platform-subject: 55/897 = 6.1% | all papers with text: 151/5855 = 2.6% [CCS 2012] … ossible red flags. Bouncer runs every application on their cloud in an attempt to detect hidden, malicious behavior, and analyzes developer accounts to block malicious developers. Bouncer does not fully solve the security and privacy problems of Android. First … [NDSS 2013] … nline social networks of the size of Twitter with moderate hardware requirements. 6.1 Data Collection Twitter Dataset We obtained elevated access to Twitter's streaming and RESTful API services. This allowed us to collect around 10% of all public tweets throug … [NDSS 2015] … cting the fairness of peer voting (Section III-B2) and resulting in false negative. To eliminate such polluting apps, we take the developer account into consideration, ensuring that the developer of every peer app is different from the one of the primary app. … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:1/25 2013:1/29 2014:0/30 2015:1/28 2016:1/24 2017:3/30 2018:2/35 2019:4/80 2020:3/67 2021:7/53 2022:5/99 2023:5/115 2024:4/83 2025:13/108 2026:5/62 ## paidtier /paid tier|Basic tier|Pro tier|Enterprise tier|API pricing|monthly (tweet|post) read/i platform-subject: 4/897 = 0.4% | all papers with text: 13/5855 = 0.2% [USENIX 2020] … to prove a product's legitimacy. Responders also discussed the benefits and drawbacks of specific products, including whether the paid tiers of some tools were worth purchasing. Location tracking and audiovisual recording. We saw many instances of responders r … [USENIX 2025] … d the limitations imposed by the "Basic" tier, payment. At the same time, Bob was ultimately the person which restricts the total monthly tweet read limit to 10,000 that the attacker had to socially engineer to perform the trans- and lacks access to streaming … [NDSS 2026] … location. The free version of this API-intended for non-commercial use-is only available over HTTP [85], with HTTPS restricted to paid tiers. We further categorized URLs using the same string-matching technique described in Section V-C to identify those associ … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:1/67 2021:0/53 2022:0/99 2023:0/115 2024:0/83 2025:1/108 2026:2/62 ## antibot /anti-?(bot|scraping|crawl\w*)|bot (detection|mitigation|management)|Cloudflare|DataDome|PerimeterX|Akamai Bot|Distil Networks/i platform-subject: 94/897 = 10.5% | all papers with text: 666/5855 = 11.4% [USENIX 2010] … on, L. Zhou, [25] F. Yu, Y. Xie, and Q. Ke. Sbotminer: Large scale search L. Zhang, and P. Barham. Vigilante: End-to-end contain- bot detection. In International Conference on Web Search ment of Internet worms. In the 12th ACM Symposium on and Data Mining (WSD … [IMC 2013] … the age 4.5 Estimating the Measurement Effort restriction due to the COPPA law), it is indeed possible to obtain Most OSNs employ anti-crawling techniques to protect the data a core set from the search function including students distributed of their members a … [WWW 2015] … 5 Detecting unique identifier cookies 5 https://aws.amazon.com/ec2/ 6 8 Our traceroutes were configured to use a single probe per CloudFlare, for example, claims to use anycasting as part of hop with a maximum of 25 hops. their content delivery network: https: … per year (hits/platform-subject with text): 2010:1/11 2011:0/18 2012:0/25 2013:1/29 2014:0/30 2015:1/28 2016:1/24 2017:1/30 2018:1/35 2019:8/80 2020:3/67 2021:8/53 2022:13/99 2023:12/115 2024:16/83 2025:19/108 2026:9/62 ## loginwall /login[- ]wall|behind (a )?login|logged[- ]?in (crawl|account|session|user)|authenticated (crawl|session)/i platform-subject: 30/897 = 3.3% | all papers with text: 123/5855 = 2.1% [USENIX 2013] … uch as me. The third snippet toggles between _SESSION['user_id'] of Mallory's session, it would allow login and logout, so that a logged-in user will get a Mallory to act on FooAppS as Alice. Because the seslogoutURL and a logged-out user will get a loginURL i … [WWW 2012] … ity 1 Dealing with Mobile Session Separation. As mentioned in section 2, websites like twitter.com and eBay differentiate between authenticated sessions depending on whether the client is a smartphone or a regular web browser. Because they use the user-agent h … [USENIX 2014] … is that web applications normally remove the original login button and display some identifying information about the user in an authenticated session. For example, after a successful registration many websites display a welcome message that includes the user … per year (hits/platform-subject with text): 2010:0/11 2011:1/18 2012:1/25 2013:1/29 2014:1/30 2015:1/28 2016:1/24 2017:4/30 2018:0/35 2019:0/80 2020:3/67 2021:0/53 2022:5/99 2023:2/115 2024:4/83 2025:2/108 2026:4/62 ## proxyresidential /residential proxy|residential IP|proxy (network|pool)|Bright Data|Luminati|Oxylabs|Smartproxy/i platform-subject: 38/897 = 4.2% | all papers with text: 275/5855 = 4.7% [USENIX 2014] … c number Z, while a compound material can be modeled by producing an "effective Z," or Zeff [46]. Under constant-spectrum X-ray illumination, the backscattered intensity of a given point is largely determined by the atomic composition of matter at that locatio … [USENIX 2014] … alerted the users that they were being photographed. The possibility that a webcam could be capturing pictures without the LED illuminating has led to suggestions that owners should tape over the webcam [43] as well as products designed to cover the camera st … [IMC 2016] … tructure.12 We attempt to identify apps implementing peer forwarding from the set of VPN apps with public IP addresses labeled as residential IPs by Spamhaus PBL. However, conducting this classification proves challenging (and prone to errors) as VPN services … per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:3/30 2015:0/28 2016:2/24 2017:2/30 2018:1/35 2019:1/80 2020:5/67 2021:4/53 2022:5/99 2023:4/115 2024:4/83 2025:5/108 2026:2/62
Full unedited output of node scripts/platforms_named_probe.mjs (named researcher-access routes, over the whole corpus rather than the platform-subject subset — the question “has anyone in these seven venues published through the official routes?” is not a question about the subset):
- platforms_named_probe-output.txt
# denominator: 5855 papers with paper.cols.txt (of 5859 extracted) ## Meta Content Library / Content Library API papers: 1/5855 = 0.02% per year: 2025:1 USENIX 2025 darkgram-a-large-scale-analysis-of-cybercriminal-activity-channels-on-telegram ## TikTok Research API / Research Tools papers: 0/5855 = 0.00% per year: (none) ## TikTok Commercial Content Library papers: 0/5855 = 0.00% per year: (none) ## YouTube Researcher Program papers: 2/5855 = 0.03% per year: 2023:1 2026:1 USENIX 2023 millions-of-people-are-watching-you-understanding-the-digital-safety-needs-and-p USENIX 2026 chameleon-channels-measuring-youtube-accounts-repurposed-for-deception-and-profi ## X / Twitter Academic Research track papers: 8/5855 = 0.14% per year: 2020:1 2022:1 2023:2 2024:1 2025:2 2026:1 IMC 2023 phishing-in-the-free-waters-a-study-of-phishing-attacks-created-using-free-websi IMC 2023 wolf-in-sheeps-clothing-evaluating-security-risks-of-the-undelegated-record-on-d PETS 2024 a-black-box-privacy-analysis-of-messaging-service-providers-chat-message-process USENIX 2025 please-dont-send-that-bot-anything-a-mixed-methods-study-of-personal-impersonati IMC 2025 fishing-for-smishing-understanding-sms-phishing-infrastructure-and-strategies-by NDSS 2026 revealing-the-secret-power-how-algorithms-can-influence-content-visibility-on-twitter-x ## CrowdTangle papers: 6/5855 = 0.10% per year: 2022:1 2023:2 2025:2 2026:1 USENIX 2022 an-audit-of-facebooks-political-ad-policy-enforcement IMC 2023 phishing-in-the-free-waters-a-study-of-phishing-attacks-created-using-free-websi NDSS 2023 tactics-threats-targets-modeling-disinformation-and-its-mitigation WWW 2025 exposing-cross-platform-coordinated-inauthentic-activity-in-the-run-up-to-the-20 WWW 2026 longitudinal-trends-in-global-climate-change-discourse-on-facebook USENIX 2025 darkgram-a-large-scale-analysis-of-cybercriminal-activity-channels-on-telegram ## Meta / Facebook Ad Library (incl. API) papers: 69/5855 = 1.18% per year: 2011:1 2013:1 2014:4 2015:3 2016:4 2017:5 2018:6 2019:5 2020:9 2021:9 2022:5 2023:6 2024:5 2025:3 2026:3 USENIX 2026 pangolin-fuzzing-multilingual-iot-firmware-with-llm-driven-code-analysis PETS 2026 a-year-under-the-dsa-ad-transparencys-uneven-landscape IEEE-SP 2025 sok-self-generated-nudes-over-private-chats-how-can-technology-contribute-to-a-s IEEE-SP 2016 following-devils-footprints-cross-platform-analysis-of-potentially-harmful-libra IEEE-SP 2023 collaborative-ad-transparency-promises-and-limitations IEEE-SP 2024 withdrawing-is-believing-detecting-inconsistencies-between-withdrawal-choices-an ## Google political ads (BigQuery / Transparency Center) papers: 1/5855 = 0.02% per year: 2026:1 PETS 2026 ad-personalization-and-transparency-in-mobile-ecosystems-a-comparative-analysis ## Pushshift papers: 35/5855 = 0.60% per year: 2018:1 2019:4 2020:3 2021:2 2022:4 2023:5 2024:6 2025:9 2026:1 USENIX 2025 investigating-the-impact-of-online-community-involvement-on-safety-practices-and USENIX 2026 stayin-alive-how-global-stolen-data-markets-thrive-on-telegram IEEE-SP 2025 security-perceptions-of-users-in-stablecoins-advantages-and-risks-within-the-cry USENIX 2025 darkgram-a-large-scale-analysis-of-cybercriminal-activity-channels-on-telegram IEEE-SP 2023 beyond-phish-toward-detecting-fraudulent-e-commerce-websites-at-scale IEEE-SP 2023 its-up-to-the-consumer-to-be-smart-understanding-the-security-and-privacy-attitu ## DSA Article 40 / vetted researcher papers: 19/5855 = 0.32% per year: 2017:1 2020:2 2021:1 2022:1 2023:2 2024:1 2025:9 2026:2 PETS 2026 the-pet-paradox-how-amazon-instrumentalises-pets-in-sidewalk-to-entrench-its-inf WWW 2026 does-this-button-work-investigating-youtubes-ineffective-user-controls IMC 2025 games-are-not-equal-classifying-cloud-gaming-contexts-for-effective-user-experie IMC 2025 fishing-for-smishing-understanding-sms-phishing-infrastructure-and-strategies-by PETS 2025 gig-work-at-what-cost-exploring-privacy-risks-of-gig-work-platform-participation PETS 2025 my-data-or-our-data-a-comparative-study-of-collaborative-family-apps-and-parents ## right-of-access / DSAR as an instrument papers: 52/5855 = 0.89% per year: 2016:2 2020:3 2021:3 2022:10 2023:6 2024:11 2025:8 2026:9 USENIX 2025 a-stakeholder-based-framework-to-highlight-tensions-when-implementing-privacy-fe USENIX 2025 addressing-the-address-books-interdependent-privacy-issues USENIX 2025 no-way-to-sign-out-unpacking-non-compliance-with-google-plays-app-account-deleti IEEE-SP 2026 setting-the-course-but-forgetting-to-steer-analyzing-compliance-with-gdprs-right PETS 2026 on-the-suitability-of-llm-driven-agents-for-dark-pattern-audits IEEE-SP 2022 scraping-sticky-leftovers-app-user-information-left-on-servers-after-account-del ## data donation papers: 25/5855 = 0.43% per year: 2019:1 2023:2 2024:5 2025:11 2026:6 WWW 2026 does-ad-free-mean-less-data-collection-an-empirical-study-of-platform-data-pract IEEE-SP 2025 characterizing-robocalls-with-multiple-vantage-points PETS 2025 models-matter-setting-accurate-privacy-expectations-for-local-and-central-differ USENIX 2025 addressing-the-address-books-interdependent-privacy-issues USENIX 2025 ares-comprehensive-path-hijacking-detection-via-routing-tree IEEE-SP 2026 setting-the-course-but-forgetting-to-steer-analyzing-compliance-with-gdprs-right
The scripts
Committed under scripts/ and reproduced here verbatim so the audit trail is readable without repo access.
The fold
plat_fold.mjs assigns every platform-name match both a family and a role. The role is the whole point: without it, “Amazon” is sixteen different studies.
- plat_fold.mjs
// Folding for design:platforms. // // The problem this solves: the string "Amazon" in the extraction is Mechanical // Turk far more often than it is the retailer, and "Alexa" is a retired // ranking list far more often than it is a voice assistant. Counting either by // substring produces a figure that is about something else entirely. So every // platform-name match is assigned BOTH a family and a ROLE, and only the // subject roles are counted as "this paper measured that platform". // // Roles: // subject the platform (or its API / store / ad archive) is where the // measured data came from — this is what design:platforms counts // recruitment the platform supplied human participants or annotators // (Mechanical Turk) — that is design:user_studies // infrastructure the platform supplied compute, storage or a vantage point // (AWS, EC2, S3, Lambda) — that is design:crawling_location // mlservice the platform supplied a hosted model or classifier // (Rekognition, Polly, Transcribe, Comprehend) // ranking "Alexa" the top-sites list — that is design:website_selection // operator the paper is by/with the platform operator and measures its // own internal systems (Facebook production data, changesets) // falsepos token collision (tiktoken, "Meta" as meta-learning, X as a // variable) — excluded from every count // // Every distinct string that matched a platform token is printed with its // assignment by `--dump`, so the residue is auditable rather than invisible. export const FAMILIES = { 'Twitter/X': /twitter|tweet|\bx\.com\b|\bxcom\b|tweepy|decahose|gardenhose/i, 'Meta (Facebook/Instagram/WhatsApp)': /facebook|\bfb\.com\b|instagram|whatsapp|crowdtangle|\bmeta ad|meta content library|messenger/i, TikTok: /tiktok|douyin|bytedance/i, Amazon: /amazon|\baws\b|\bec2\b|\bmturk\b|\balexa\b|\bmechanical turk\b/i, YouTube: /youtube/i, Reddit: /reddit|pushshift/i, Telegram: /telegram/i, LinkedIn: /linkedin/i, Discord: /discord/i, 'WeChat/Weibo/QQ': /wechat|weibo|\bqq\b|xiaohongshu|tencent/i, 'Google (Play/Search/Ads)': /google play|play store|googleplay|google search|google ads|google adwords|google ad library|adsense|doubleclick|youtube data api/i, 'Apple App Store': /app store|itunes|apple store/i, Steam: /\bsteam\b/i, Airbnb: /airbnb/i, Uber: /\buber\b/i, Yelp: /\byelp\b/i, eBay: /\bebay\b/i, Netflix: /netflix/i, Spotify: /spotify/i, Twitch: /twitch/i, Tumblr: /tumblr/i, Flickr: /flickr/i, Pinterest: /pinterest/i, Snapchat: /snapchat/i, Mastodon: /mastodon|fediverse|\bnostr\b|bluesky/i, }; // Ordered, most specific first. Each rule is [regex, role]. const ROLE_RULES = [ // token collisions — kill these before anything else [/tiktoken/i, 'falsepos'], [/\bmeta-?learn|meta-?data|metadata|meta-?analysis|meta-?classifier|\bmeta model/i, 'falsepos'], [/steam(ing|ed)\b|\bupsteam|downsteam/i, 'falsepos'], [/\buber(t|tas)\b/i, 'falsepos'], // recruitment [/mechanical turk|\bmturk\b|\bamt\b|amazon turk|\bturk\b|prolific academic/i, 'recruitment'], [/recruit(ed|ment)?\b/i, 'recruitment'], // ML services [/rekognition|amazon polly|amazon transcribe|amazon comprehend|amazon machine learning|amazon ml\b|amazon lex/i, 'mlservice'], [/text-to-speech|speech-to-text|\btts\b|translation api|vision api/i, 'mlservice'], // infrastructure [/device farm|test lab|private registry|\bcdn\b|hosting provider/i, 'infrastructure'], [/\bec2\b|\baws\b|amazon web service|elastic compute|amazon s3|lambda|elastic mapreduce|simple queue|amazon cloudfront|amazon (batch|vms)|amazon.s command line/i, 'infrastructure'], // The retired Alexa top-sites list. This rule is the whole reason the module // exists: 51 papers give their population as the bare string "Alexa", and a // substring match on the Amazon family turns every one of them into an // "Amazon" measurement. Anything naming Alexa that is NOT a skill, a voice // device or the skill store is the ranking list. [/\balexa\b/i, 'ranking'], // benchmark corpora named after a platform (Amazon Reviews, Yelp Polarity): // the paper trains on them, it does not measure the platform [/wikitext|\bxsum\b|cc-news|glue benchmark|imdb\b|sst-?2|yelp polarity|amazon polarity/i, 'benchmark'], // operator-internal [/production data|infrastructure changeset|internal (logs|data|telemetry)|server logs of|site integrity/i, 'operator'], ]; // Strings that are the platform as subject but would otherwise be caught by a // broader rule above. Checked BEFORE ROLE_RULES. const SUBJECT_OVERRIDES = [ /alexa[- ]?(skill|marketplace|voice|device|echo|assistant|app)/i, /skills? (store|market|aggregation)/i, /\balexa\b[^,;]{0,40}\bskill/i, /amazon\.?com|amazon \[|amazon (reviews|market|product|best-?sell|prime|fire tv|curated|android app store|and )/i, /^amazon$/i, ]; export function roleOf(s) { const str = String(s); for (const re of SUBJECT_OVERRIDES) if (re.test(str)) return 'subject'; for (const [re, role] of ROLE_RULES) if (re.test(str)) return role; return 'subject'; } export function familiesOf(s) { const str = String(s); const out = []; for (const [fam, re] of Object.entries(FAMILIES)) if (re.test(str)) out.push(fam); return out; } // A single string can name several platforms ("Amazon, Best Buy, Walmart, and // Taobao"). Returns [{family, role}]. export function tagsOf(s) { const role = roleOf(s); if (role === 'falsepos' || role === 'benchmark') return []; return familiesOf(s).map((family) => ({ family, role })); } export const ANY_PLATFORM = new RegExp( Object.values(FAMILIES) .map((r) => r.source) .join('|'), 'i' );
The report
- platforms_report.mjs
// Report script for design:platforms (and the four named sub-pages). // // Every figure prints its own denominator. Counts are of PAPERS, never tuples. // Sentinels (not-stated / none-mentioned) are never counted as answers. // // node scripts/platforms_report.mjs # the page's figures // node scripts/platforms_report.mjs --dump # every folded string + role // node scripts/platforms_report.mjs --residue # strings the fold left as 'subject' with no family // node scripts/platforms_report.mjs --quotes <fam> # evidence quotes for one family // // Inclusion rule, fixed before the first figure was computed: // A paper "measured platform P" iff at least one population[].sourceList // string folds to P with role 'subject' (see scripts/plat_fold.mjs). Role // 'recruitment' (Mechanical Turk), 'infrastructure' (AWS/EC2), 'mlservice' // (Rekognition), 'ranking' (the Alexa top-sites list), 'operator' (the // platform's own production data) and 'falsepos' (tiktoken) are NOT that. import { loadExtractions, isSentinel, POPULATIONS } from './lib.mjs'; import { tagsOf, roleOf, familiesOf, FAMILIES, ANY_PLATFORM } from './plat_fold.mjs'; const rows = loadExtractions(); const argv = process.argv.slice(2); const has = (f) => argv.includes(f); const val = (f) => (argv.indexOf(f) >= 0 ? argv[argv.indexOf(f) + 1] : null); const pct = (n, d) => (d === 0 ? 'n/a' : `${((100 * n) / d).toFixed(1)}%`); const key = (r) => `${r.venue}/${r.year}/${r.slug}`; // ---------------------------------------------------------------- tag every paper // // INCLUSION RULE (fixed before the first figure; see the provenance page). // A paper counts as measuring platform P if P is matched, with a non-excluded // role, in at least one of four signals: // (a) title // (b) population[].sourceList — where the measured data came from // (c) detection[].phenomenon — what was measured // (d) tools[].name, used or produced — the API / scraper it went through // Signal (b) alone under-recalls badly: the WWW 2024 TikTok feed study gives // its population as "custom bot accounts" and never names TikTok there. // Excluded roles: recruitment, infrastructure, mlservice, ranking, operator, // benchmark, falsepos (see scripts/plat_fold.mjs). const SIGNALS = { title: (r) => [r.title], sourceList: (r) => (r.population || []).map((p) => p.sourceList), phenomenon: (r) => (r.detection || []).map((d) => d.phenomenon), tool: (r) => (r.tools || []) .filter((t) => t.usedOrMentioned === 'used' || t.usedOrMentioned === 'produced') .map((t) => t.name), }; // perPaper: Map(paperKey -> Map(family -> Set(signal names))) const perPaper = new Map(); // perPaperRoles: Map(paperKey -> Map(family -> Set(roles seen on sourceList))) const perPaperRoles = new Map(); const stringRoles = new Map(); // distinct sourceList string -> {role, families, papers:Set} for (const r of rows) { const k = key(r); const fams = new Map(); const roles = new Map(); for (const [sig, get] of Object.entries(SIGNALS)) { for (const raw of get(r)) { if (!raw || isSentinel(raw)) continue; const s = String(raw); // Paper-level correction. A qualitative study gives its recruitment // channels as a population sourceList ("professional networks, Reddit, // Twitter, Slack, and Upwork"). Naming Twitter there is not measuring // Twitter. So for a paper with human participants, sourceList alone does // not make it a platform study — the platform must also show up in the // title, the measured phenomenon, or a tool. if (sig === 'sourceList' && (r.participants || []).length > 0) { if (ANY_PLATFORM.test(s)) { if (!stringRoles.has(s)) stringRoles.set(s, { role: 'recruitment', families: familiesOf(s), papers: new Set() }); stringRoles.get(s).papers.add(k); for (const fam of familiesOf(s)) { if (!roles.has(fam)) roles.set(fam, new Set()); roles.get(fam).add('recruitment'); } } continue; } if (sig === 'sourceList') { if (ANY_PLATFORM.test(s)) { if (!stringRoles.has(s)) stringRoles.set(s, { role: roleOf(s), families: familiesOf(s), papers: new Set() }); stringRoles.get(s).papers.add(k); } for (const fam of familiesOf(s)) { if (!roles.has(fam)) roles.set(fam, new Set()); roles.get(fam).add(roleOf(s)); } } for (const { family, role } of tagsOf(s)) { if (role !== 'subject') continue; if (!fams.has(family)) fams.set(family, new Set()); fams.get(family).add(sig); } } } if (fams.size) perPaper.set(k, fams); if (roles.size) perPaperRoles.set(k, roles); } const byKey = new Map(rows.map((r) => [key(r), r])); const subjectPapers = (family) => [...perPaper.entries()].filter(([, fams]) => fams.has(family)).map(([k]) => byKey.get(k)); const anySubject = [...perPaper.keys()].map((k) => byKey.get(k)); const signalsFor = (family) => { const c = {}; for (const [, fams] of perPaper) if (fams.has(family)) for (const sig of fams.get(family)) c[sig] = (c[sig] || 0) + 1; return c; }; // -------------------------------------------------------------------- --dump if (has('--dump')) { const out = [...stringRoles.entries()].sort((a, b) => b[1].papers.size - a[1].papers.size); console.log(`# every distinct population.sourceList string that matched a platform token: ${out.length}`); for (const [s, m] of out) console.log(`${String(m.papers.size).padStart(4)} ${m.role.padEnd(14)} ${m.families.join('|') || '(none)'} ${JSON.stringify(s)}`); process.exit(0); } if (has('--residue')) { // Strings that matched a platform token, were assigned 'subject', and whose // family list is a single broad family — the ones a human should eyeball. const out = [...stringRoles.entries()].filter(([, m]) => m.role === 'subject'); console.log(`# strings folded to role=subject: ${out.length} distinct`); for (const [s, m] of out.sort((a, b) => b[1].papers.size - a[1].papers.size)) console.log(`${String(m.papers.size).padStart(4)} ${m.families.join('|')} ${JSON.stringify(s)}`); process.exit(0); } if (has('--keys')) { for (const k of perPaper.keys()) console.log(k); process.exit(0); } if (has('--list')) { const fam = val('--list'); const ps = subjectPapers(fam).sort((a, b) => a.year - b.year || a.venue.localeCompare(b.venue)); console.log(`# ${ps.length} papers matched family ${JSON.stringify(fam)} with role=subject`); for (const r of ps) { const sigs = [...perPaper.get(key(r)).get(fam)].sort().join(','); console.log(`${r.venue}\t${r.year}\t${sigs}\t${r.title}`); if (has('--why')) { const seen = new Set(); for (const [sig, get] of Object.entries(SIGNALS)) for (const raw of get(r)) { if (!raw || isSentinel(raw)) continue; if (sig === 'sourceList' && (r.participants || []).length > 0) continue; if (!tagsOf(String(raw)).some((t) => t.family === fam && t.role === 'subject')) continue; const line = ` ${sig}: ${JSON.stringify(String(raw))}`; if (!seen.has(line)) { seen.add(line); console.log(line); } } } } process.exit(0); } if (has('--quotes')) { const fam = val('--quotes'); for (const r of subjectPapers(fam).sort((a, b) => a.year - b.year)) { for (const p of r.population) { if (!p.sourceList || !tagsOf(p.sourceList).some((t) => t.family === fam && t.role === 'subject')) continue; console.log(`${r.venue} ${r.year} ${r.slug}\n n=${p.n} unit=${p.unit} method=${p.samplingMethod} list=${JSON.stringify(p.sourceList)}\n [${p.evidence.section}] ${p.evidence.quote}\n`); } } process.exit(0); } // ============================================================== the page's figures console.log('='.repeat(78)); console.log('design:platforms — report script'); console.log(`corpus: ${rows.length} extracted papers, 7 venues, ${Math.min(...rows.map((r) => r.year))}-${Math.max(...rows.map((r) => r.year))}`); console.log('='.repeat(78)); // -- 0. base denominators const otherService = rows.filter((r) => (r.platforms || []).includes('other-online-service')); const web = rows.filter((r) => (r.platforms || []).includes('web')); const crawled = rows.filter(POPULATIONS.crawled); const sampled = rows.filter((r) => (r.population || []).length > 0); console.log(`\n## Denominators`); console.log(`all extracted papers ${rows.length}`); console.log(`platforms includes 'other-online-service' ${otherService.length} (${pct(otherService.length, rows.length)} of all)`); console.log(`platforms includes 'web' ${web.length} (${pct(web.length, rows.length)} of all)`); console.log(`ran a crawl (crawlConfig or studyType, per OVERVIEW) ${crawled.length} (${pct(crawled.length, rows.length)} of all)`); console.log(`drew a study population ${sampled.length}`); console.log(`named >=1 large platform as SUBJECT of measurement ${anySubject.length} (${pct(anySubject.length, sampled.length)} of the ${sampled.length} that drew a population)`); // -- 1. ranking of families, subject role only console.log(`\n## Papers measuring a named large platform (role=subject), of ${sampled.length} papers that drew a study population`); console.log('rank papers share family'); const ranked = Object.keys(FAMILIES) .map((f) => [f, subjectPapers(f)]) .filter(([, ps]) => ps.length > 0) .sort((a, b) => b[1].length - a[1].length); ranked.forEach(([f, ps], i) => console.log(`${String(i + 1).padStart(4)} ${String(ps.length).padStart(6)} ${pct(ps.length, sampled.length).padStart(6)} ${f}`)); // -- 2. the four named sub-pages, by role console.log(`\n## The four platforms [[start]] names, by the ROLE the name plays in population.sourceList`); console.log(' (sourceList only — a paper can still be a subject paper via title/phenomenon/tool,'); console.log(' which is why "subject" here is lower than the ranking above.)'); console.log('family subject recruit infra mlsvc ranking operator'); for (const fam of ['Meta (Facebook/Instagram/WhatsApp)', 'Twitter/X', 'TikTok', 'Amazon']) { const counts = {}; for (const role of ['subject', 'recruitment', 'infrastructure', 'mlservice', 'ranking', 'operator']) { counts[role] = [...perPaperRoles.values()].filter((fams) => fams.has(fam) && fams.get(fam).has(role)).length; } console.log( `${fam.padEnd(37)} ${String(counts.subject).padStart(7)} ${String(counts.recruitment).padStart(7)} ${String(counts.infrastructure).padStart(5)} ${String(counts.mlservice).padStart(5)} ${String(counts.ranking).padStart(7)} ${String(counts.operator).padStart(8)}` ); } // -- 3. per year, subject role, top families console.log(`\n## Per-year paper counts, role=subject (2025-2026 provisional: see literature:corpus)`); const years = [...new Set(rows.map((r) => r.year))].sort(); const showFams = ranked.slice(0, 8).map(([f]) => f); console.log(['year', 'corpus', ...showFams.map((f) => f.slice(0, 12))].join('\t')); for (const y of years) { const line = [y, rows.filter((r) => r.year === y).length]; for (const f of showFams) line.push(subjectPapers(f).filter((r) => r.year === y).length); console.log(line.join('\t')); } // -- 4. three-year buckets for the two big families (the API-access story) console.log(`\n## Twitter/X and Meta as subject, 3-year buckets, as a share of that bucket's corpus`); const buckets = [ [2010, 2012], [2013, 2015], [2016, 2018], [2019, 2021], [2022, 2024], [2025, 2026], ]; console.log('bucket corpus Twitter/X Meta TikTok'); for (const [a, b] of buckets) { const n = rows.filter((r) => r.year >= a && r.year <= b).length; const cells = ['Twitter/X', 'Meta (Facebook/Instagram/WhatsApp)', 'TikTok'].map((f) => { const c = subjectPapers(f).filter((r) => r.year >= a && r.year <= b).length; return `${String(c).padStart(3)} (${pct(c, n).padStart(5)})`; }); console.log(`${a}-${b}${b === 2026 ? '*' : ' '} ${String(n).padStart(6)} ${cells.join(' ')}`); } console.log('* 2025-2026 is provisional: CCS 2026 and IMC 2026 have not been held, and'); console.log(' IEEE S&P 2026 / WWW 2026 abstracts are not in OpenAlex, so selection under-covers them.'); // -- 5. how the platform papers got their data console.log(`\n## How the ${anySubject.length} platform-subject papers obtained the data (temporal.mode, paper-counted, multi-valued)`); const modes = {}; for (const r of anySubject) for (const m of new Set((r.temporal || []).map((t) => t.mode).filter((m) => m && !isSentinel(m)))) modes[m] = (modes[m] || 0) + 1; for (const [m, c] of Object.entries(modes).sort((a, b) => b[1] - a[1])) console.log(` ${m.padEnd(20)} ${String(c).padStart(4)} ${pct(c, anySubject.length)}`); const noMode = anySubject.filter((r) => (r.temporal || []).every((t) => !t.mode || isSentinel(t.mode))).length; console.log(` (no stated mode) ${String(noMode).padStart(4)} ${pct(noMode, anySubject.length)}`); // -- 6. official API vs scraping, from tool names console.log(`\n## Did they use the platform's official API, or scrape? (tools[].name over the ${anySubject.length} platform-subject papers)`); const API_RE = /\bapi\b|graph api|streaming api|decahose|gardenhose|firehose|pushshift|crowdtangle|content library|ad library/i; const SCRAPE_RE = /scrap|selenium|puppeteer|playwright|phantomjs|\bcurl\b|wget|beautifulsoup|\bbs4\b|mechanize|scrapy|openwpm|webdriver|\bcrawler\b/i; const usedApi = anySubject.filter((r) => (r.tools || []).some((t) => (t.usedOrMentioned === 'used' || t.usedOrMentioned === 'produced') && API_RE.test(t.name))); const usedScrape = anySubject.filter((r) => (r.tools || []).some((t) => (t.usedOrMentioned === 'used' || t.usedOrMentioned === 'produced') && SCRAPE_RE.test(t.name))); const both = usedApi.filter((r) => usedScrape.includes(r)); const neither = anySubject.filter((r) => !usedApi.includes(r) && !usedScrape.includes(r)); console.log(` names an API-shaped tool ${String(usedApi.length).padStart(4)} ${pct(usedApi.length, anySubject.length)}`); console.log(` names a scraping/automation tool ${String(usedScrape.length).padStart(4)} ${pct(usedScrape.length, anySubject.length)}`); console.log(` both ${String(both.length).padStart(4)} ${pct(both.length, anySubject.length)}`); console.log(` neither (no tool named for it) ${String(neither.length).padStart(4)} ${pct(neither.length, anySubject.length)}`); console.log(' NB: this is a keyword split over free-text tool names, not an enum. Report as a ranking.'); // -- 7. the login wall const platCrawled = anySubject.filter((r) => r.crawlConfig !== null); const platCrawledBroad = anySubject.filter(POPULATIONS.crawled); console.log(`\n## The login wall: crawlConfig.authentication`); // crawlConfig is null for papers whose crawl is known only from studyTypes, so // this table's population is "papers with a crawlConfig object", not `crawled`. const crawlCfg = rows.filter((r) => r.crawlConfig !== null); for (const [label, set] of [ [`platform-subject papers with a crawlConfig object (${platCrawled.length})`, platCrawled], [`all papers with a crawlConfig object (${crawlCfg.length})`, crawlCfg], ]) { const c = {}; for (const r of set) { const a = r.crawlConfig.authentication; c[a] = (c[a] || 0) + 1; } console.log(` ${label}`); for (const [k, v] of Object.entries(c).sort((a, b) => b[1] - a[1])) console.log(` ${k.padEnd(18)} ${String(v).padStart(4)} ${pct(v, set.length)}`); const stated = set.filter((r) => !isSentinel(r.crawlConfig.authentication)).length; console.log(` -> states a value: ${stated}/${set.length} = ${pct(stated, set.length)}`); } // -- 8. ToS / robots.txt / ethics review console.log(`\n## Rules of engagement: robots.txt and ethics review`); for (const [label, set] of [ [`platform-subject papers with a crawlConfig object (${platCrawled.length})`, platCrawled], [`all papers with a crawlConfig object (${crawlCfg.length})`, crawlCfg], ]) { const stated = set.filter((r) => r.ethics && !isSentinel(r.ethics.robotsTxt)).length; console.log(` ${label}: says anything about robots.txt: ${stated} ${pct(stated, set.length)}`); } const platEmpirical = anySubject.filter((r) => r.isEmpirical); const allEmpirical = rows.filter((r) => r.isEmpirical); for (const [label, set] of [ [`platform-subject empirical papers (${platEmpirical.length})`, platEmpirical], [`all empirical papers (${allEmpirical.length})`, allEmpirical], ]) { const stated = set.filter((r) => r.ethics && !isSentinel(r.ethics.reviewOutcome)).length; console.log(` ${label}: states an ethics-review outcome: ${stated} ${pct(stated, set.length)}`); } // -- 9. artifacts: can a platform study even release its data? console.log(`\n## Artifact availability (artifacts.availability), platform-subject empirical papers vs all empirical`); for (const [label, set] of [ [`platform-subject empirical (${platEmpirical.length})`, platEmpirical], [`all empirical (${allEmpirical.length})`, allEmpirical], ]) { const c = {}; for (const r of set) { const a = r.artifacts ? r.artifacts.availability : 'absent'; c[a] = (c[a] || 0) + 1; } console.log(` ${label}`); for (const [k, v] of Object.entries(c).sort((a, b) => b[1] - a[1])) console.log(` ${k.padEnd(24)} ${String(v).padStart(4)} ${pct(v, set.length)}`); } // -- 10. population sizes: what does n look like for a platform study console.log(`\n## Study size (population.n on the platform-subject tuple), where stated`); for (const fam of ['Twitter/X', 'Meta (Facebook/Instagram/WhatsApp)', 'Amazon', 'TikTok']) { const ns = []; for (const r of subjectPapers(fam)) for (const p of r.population) if (p.sourceList && tagsOf(p.sourceList).some((t) => t.family === fam && t.role === 'subject') && typeof p.n === 'number') ns.push(p.n); ns.sort((a, b) => a - b); const med = ns.length ? ns[Math.floor(ns.length / 2)] : null; console.log(` ${fam.padEnd(37)} tuples with n: ${String(ns.length).padStart(3)} min ${ns[0] ?? '-'} median ${med ?? '-'} max ${ns[ns.length - 1] ?? '-'}`); } // -- 11. measured results available to quote console.log(`\n## detection[] tuples carrying a prevalence, on the platform-subject papers`); const withPrev = anySubject.filter((r) => (r.detection || []).some((d) => d.prevalence)); console.log(` papers with >=1 detection tuple with a non-null prevalence: ${withPrev.length} ${pct(withPrev.length, anySubject.length)} of ${anySubject.length}`); // -- 12. legal console.log(`\n## Laws assessed on platform-subject papers`); const platLegal = anySubject.filter((r) => (r.legal || []).some((l) => l.usedOrMentioned === 'used')); console.log(` platform-subject papers that assessed a law: ${platLegal.length} ${pct(platLegal.length, anySubject.length)}`); const laws = {}; for (const r of platLegal) for (const l of new Set(r.legal.filter((l) => l.usedOrMentioned === 'used').map((l) => l.law))) laws[l] = (laws[l] || 0) + 1; for (const [l, c] of Object.entries(laws).sort((a, b) => b[1] - a[1]).slice(0, 10)) console.log(` ${l.padEnd(28)} ${c}`); // -- 13. fold audit console.log(`\n## Fold audit`); const roleCounts = {}; for (const m of stringRoles.values()) roleCounts[m.role] = (roleCounts[m.role] || 0) + 1; console.log(` distinct population.sourceList strings matching a platform token: ${stringRoles.size}`); for (const [r, c] of Object.entries(roleCounts).sort((a, b) => b[1] - a[1])) console.log(` role=${r.padEnd(15)} ${String(c).padStart(4)} distinct strings`); console.log(' full string-by-string assignment: node scripts/platforms_report.mjs --dump'); // -- 14. named access routes, folded console.log(`\n## Named access routes on the ${anySubject.length} platform-subject papers (tools[] used/produced, paper-counted)`); const ROUTES = [ ['platform REST/search API (any platform)', /\bAPI\b/i], ['Twitter/X streaming or search API', /twitter[^,;]{0,20}(api|stream)|(stream|search|academic|historical|rest)[^,;]{0,12}(twitter|api).{0,0}|decahose|gardenhose|firehose|\bX API\b/i], ['Tweepy / twarc / twitter client lib', /tweepy|twarc|python-twitter|twitter4j/i], ['Facebook/Meta Graph or Marketing API', /(facebook|meta)[^,;]{0,20}(graph|marketing|ads?) api|open graph/i], ['Meta / Facebook Ad Library', /ad library/i], ['CrowdTangle', /crowdtangle/i], ['Pushshift (Reddit archive)', /pushshift/i], ['Reddit API / PRAW', /reddit[^,;]{0,12}api|\bpraw\b/i], ['YouTube Data API', /youtube[^,;]{0,15}(api|data api)/i], ['TikTok API / TikTok-Api', /tiktok[- ]?api/i], ['Instagram API / scraper', /instagram[^,;]{0,15}(api|scraper)/i], ['generic browser automation', /selenium|puppeteer|playwright|phantomjs|webdriver|openwpm/i], ['custom scraper / crawler', /scrap|\bcrawler\b|beautifulsoup|scrapy|mechanize/i], ]; for (const [label, re] of ROUTES) { const c = anySubject.filter((r) => (r.tools || []).some((t) => (t.usedOrMentioned === 'used' || t.usedOrMentioned === 'produced') && re.test(t.name)) ); const byYear = {}; for (const r of c) byYear[r.year] = (byYear[r.year] || 0) + 1; const yrs = Object.keys(byYear).sort().map((y) => `${y}:${byYear[y]}`).join(' '); console.log(` ${label.padEnd(42)} ${String(c.length).padStart(4)} ${pct(c.length, anySubject.length).padStart(6)} ${yrs}`); } console.log(' NB: free-text tool names, matched by regex. Rankings only, never a precise share.'); // -- 15. what the field measures on platforms: folded phenomena console.log(`\n## What the ${anySubject.length} platform-subject papers measure (detection.phenomenon, folded into families, paper-counted)`); const PHEN = [ ['spam / abuse / fraud accounts', /spam|abus|fraud|scam|bot\b|fake account|sybil|troll|astroturf/i], ['misinformation / content moderation', /misinform|disinform|rumor|rumour|fake news|moderat|hate|toxic|censor|takedown|removal/i], ['advertising / targeting / ad delivery', /\bads?\b|advertis|targeting|ad delivery|ad transparen/i], ['tracking / third-party data flows', /track|third-part|cookie|fingerprint|pixel/i], ['privacy settings / user disclosure', /privacy setting|self-disclos|disclosure|visibility|profile privacy/i], ['recommendation / personalisation / feed', /recommend|personali[sz]|feed|ranking algorithm|filter bubble/i], ['account security / hijacking / auth', /hijack|compromis|credential|authenticat|2fa|password|takeover/i], ['deletion / data subject rights / compliance', /deletion|delete|gdpr|compliance|right of access|retention/i], ['network / infrastructure performance', /latency|throughput|peering|cdn|bgp|dns|outage|performance/i], ['app / store / SDK analysis', /\bsdk\b|app store|permission|library|apk/i], ]; for (const [label, re] of PHEN) { const c = anySubject.filter((r) => (r.detection || []).some((d) => d.phenomenon && re.test(d.phenomenon))); console.log(` ${label.padEnd(44)} ${String(c.length).padStart(4)} ${pct(c.length, anySubject.length)}`); } const unmatched = anySubject.filter( (r) => (r.detection || []).length > 0 && !PHEN.some(([, re]) => (r.detection || []).some((d) => d.phenomenon && re.test(d.phenomenon))) ); console.log(` RESIDUE: papers with detection tuples matching no family above: ${unmatched.length} ${pct(unmatched.length, anySubject.length)}`); console.log(' residue sample (first 15 phenomena):'); for (const r of unmatched.slice(0, 15)) console.log(` [${r.venue} ${r.year}] ${(r.detection[0] || {}).phenomenon}`);
The full-text probes
Whitespace is collapsed before matching. This is not cosmetic: a PDF line break inside rate limit or terms of service hides the hit and silently undercounts.
- platforms_fulltext.mjs
// Full-text probes for design:platforms. // // Whitespace is collapsed before matching: a PDF line break inside "rate // limit" or "terms of service" otherwise hides the hit and silently // undercounts. Counts are of PAPERS. Each probe prints its own denominator and // three example hits, so the regex's width is visible rather than assumed. // // node scripts/platforms_fulltext.mjs # all probes // node scripts/platforms_fulltext.mjs --probe tos --examples 8 // import fs from 'node:fs'; import path from 'node:path'; import { execSync } from 'node:child_process'; import { dataRoot, loadExtractions } from './lib.mjs'; const argv = process.argv.slice(2); const val = (f) => (argv.indexOf(f) >= 0 ? argv[argv.indexOf(f) + 1] : null); const only = val('--probe'); const NEX = Number(val('--examples') || 3); const rows = loadExtractions(); // The platform-subject set, taken from the report script so the two agree. const listed = new Set( Object.keys({}).length ? [] : execSync(`node ${path.join(import.meta.dirname, 'platforms_report.mjs')} --keys`, { encoding: 'utf8', maxBuffer: 64 * 1024 * 1024, }) .split('\n') .filter((l) => l.trim()) ); const PROBES = { ratelimit: /rate[- ]?limit(ed|ing|s)?\b/i, // 2026-08-27: the first version of this probe was /terms of (service|use)/i, // which matches "in terms of user pairs". \b fixes it; the count fell. tos: /terms of service|terms of use\b|acceptable use policy|\bToS\b/i, sockpuppet: /sock[- ]?puppet/i, donation: /data donation|donated (their )?data|data[- ]donating/i, captcha: /CAPTCHA/i, researchapi: /research(er)?[- ]api|academic (research )?(product )?track|Academic API|Meta Content Library|Researcher Platform|TikTok Research/i, // 2026-08-27: /\bDSA\b/i matched the DSA *signature algorithm* (".DSA file // under META-INF/"). Narrowed to the regulation. dsa: /Digital Services Act|Article 40(\(|\s|,)/, crowdtangle: /CrowdTangle/i, // 2026-08-27: /Ad(vert(ising)?)? Library/i matched the Android *advertising // library* ("AdMob advertising library"), which is a different thing // entirely. Narrowed to the named ad-transparency archives. adarchive: /Ad Library API|(Facebook|Meta|Google|Twitter|TikTok|X)['\u2019]?s? (Ad|Advert\w+) (Library|Archive)|Ad(vert\w+)? Transparency (Cent|Report|Tool)|Political Ad(vert\w+)? (Library|Archive)/, pushshift: /Pushshift/i, dsar: /right of access|subject access request|\bDSAR\b/i, apikey: /API (key|credentials|token)|developer account|elevated access/i, paidtier: /paid tier|Basic tier|Pro tier|Enterprise tier|API pricing|monthly (tweet|post) read/i, antibot: /anti-?(bot|scraping|crawl\w*)|bot (detection|mitigation|management)|Cloudflare|DataDome|PerimeterX|Akamai Bot|Distil Networks/i, loginwall: /login[- ]wall|behind (a )?login|logged[- ]?in (crawl|account|session|user)|authenticated (crawl|session)/i, proxyresidential: /residential proxy|residential IP|proxy (network|pool)|Bright Data|Luminati|Oxylabs|Smartproxy/i, }; const key = (r) => `${r.venue}/${r.year}/${r.slug}`; const platform = rows.filter((r) => listed.has(key(r))); console.log(`# platform-subject papers: ${platform.length} (from platforms_report.mjs --keys)`); const withText = platform.filter((r) => fs.existsSync(path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`)) ); console.log(`# of those, with paper.cols.txt on disk: ${withText.length}`); const texts = new Map(); for (const r of withText) { const f = path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`); texts.set(key(r), fs.readFileSync(f, 'utf8').replace(/\s+/g, ' ')); } // The same probes over ALL papers with full text, so the platform figure has // something to be a share OF. const allWithText = rows.filter((r) => fs.existsSync(path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`)) ); for (const [name, re] of Object.entries(PROBES)) { if (only && only !== name) continue; const hits = withText.filter((r) => re.test(texts.get(key(r)))); // comparison set: read lazily, only for this probe let allHits = 0; for (const r of allWithText) { const f = path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`); const t = texts.get(key(r)) ?? fs.readFileSync(f, 'utf8').replace(/\s+/g, ' '); if (re.test(t)) allHits += 1; } console.log( `\n## ${name} ${re}\n platform-subject: ${hits.length}/${withText.length} = ${((100 * hits.length) / withText.length).toFixed(1)}%` + ` | all papers with text: ${allHits}/${allWithText.length} = ${((100 * allHits) / allWithText.length).toFixed(1)}%` ); for (const r of hits.slice(0, NEX)) { const t = texts.get(key(r)); const m = re.exec(t); const a = Math.max(0, m.index - 130); console.log(` [${r.venue} ${r.year}] … ${t.slice(a, m.index + 130)} …`); } // per-year, so a "this is current practice" claim can be checked const byYear = {}; for (const r of hits) byYear[r.year] = (byYear[r.year] || 0) + 1; const denYear = {}; for (const r of withText) denYear[r.year] = (denYear[r.year] || 0) + 1; console.log( ' per year (hits/platform-subject with text): ' + Object.keys(denYear) .sort() .map((y) => `${y}:${byYear[y] || 0}/${denYear[y]}`) .join(' ') ); }
- platforms_named_probe.mjs
// Named-instrument probe across the WHOLE corpus (not just the platform-subject // set): has anyone in these seven venues actually published using the official // researcher-access routes? Whitespace collapsed; paper counts; per-year. // // node scripts/platforms_named_probe.mjs import fs from 'node:fs'; import path from 'node:path'; import { dataRoot, loadExtractions } from './lib.mjs'; const NAMED = { 'Meta Content Library / Content Library API': /Meta Content Library|Content Library API/i, 'TikTok Research API / Research Tools': /TikTok Research (API|Tools)/i, 'TikTok Commercial Content Library': /Commercial Content (Library|API)/i, 'YouTube Researcher Program': /YouTube Research(er)? Program/i, 'X / Twitter Academic Research track': /Academic (Research )?(product )?track|Twitter Academic|Academic API|academic research access/i, 'CrowdTangle': /CrowdTangle/i, 'Meta / Facebook Ad Library (incl. API)': /Ad Library|Ads? Archive API/i, 'Google political ads (BigQuery / Transparency Center)': /google_political_ads|Ads Transparency Cent|Google Political Advertising/i, 'Pushshift': /Pushshift/i, 'DSA Article 40 / vetted researcher': /Article 40|vetted researcher/i, 'right-of-access / DSAR as an instrument': /right of access|subject access request|\bDSAR\b/i, 'data donation': /data donation|donated (their )?data/i, }; const rows = loadExtractions(); const textPath = (r) => path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`); const withText = rows.filter((r) => fs.existsSync(textPath(r))); console.log(`# denominator: ${withText.length} papers with paper.cols.txt (of ${rows.length} extracted)`); const hits = Object.fromEntries(Object.keys(NAMED).map((k) => [k, []])); for (const r of withText) { const t = fs.readFileSync(textPath(r), 'utf8').replace(/\s+/g, ' '); for (const [k, re] of Object.entries(NAMED)) if (re.test(t)) hits[k].push(r); } for (const [k, h] of Object.entries(hits)) { const byYear = {}; for (const r of h) byYear[r.year] = (byYear[r.year] || 0) + 1; console.log(`\n## ${k}\n papers: ${h.length}/${withText.length} = ${((100 * h.length) / withText.length).toFixed(2)}%`); console.log(` per year: ${Object.keys(byYear).sort().map((y) => `${y}:${byYear[y]}`).join(' ') || '(none)'}`); for (const r of h.slice(-6)) console.log(` ${r.venue} ${r.year} ${r.slug}`); }
The audit helper
- platforms_audit.mjs
// Hand-audit helper for design:platforms. // // The report script's family sets are CANDIDATE sets: a regex over title, // population.sourceList, detection.phenomenon and tool names. This prints, for // a deterministic every-k-th sample of one family, the whitespace-collapsed // full-text windows around the platform name, so a human can decide whether the // paper actually collected data from the platform or merely names it. // // Whitespace is collapsed before matching because a PDF line break inside the // phrase otherwise hides the hit. // // node scripts/platforms_audit.mjs "Twitter/X" 10 // import fs from 'node:fs'; import path from 'node:path'; import { execSync } from 'node:child_process'; import { dataRoot } from './lib.mjs'; import { FAMILIES } from './plat_fold.mjs'; const fam = process.argv[2]; const stride = Number(process.argv[3] || 10); const re = FAMILIES[fam]; if (!re) throw new Error(`unknown family ${JSON.stringify(fam)}; known: ${Object.keys(FAMILIES).join(', ')}`); const listed = execSync(`node ${path.join(import.meta.dirname, 'platforms_report.mjs')} --list ${JSON.stringify(fam)}`, { encoding: 'utf8', maxBuffer: 64 * 1024 * 1024, }) .split('\n') .slice(1) .filter((l) => l.includes('\t')); const rows = fs .readFileSync(path.join(dataRoot(), 'extract/run1/extractions.jsonl'), 'utf8') .split('\n') .filter((l) => l) .map((l) => JSON.parse(l)); const byTitle = new Map(rows.map((r) => [r.title, r])); const sample = listed.filter((_, i) => i % stride === 0); console.log(`# family ${fam}: ${listed.length} candidates, auditing every ${stride}th = ${sample.length}`); const WIN = 200; for (const line of sample) { const [venue, year, sigs, title] = line.split('\t'); const r = byTitle.get(title); if (!r) { console.log(`\n## ${venue} ${year} :: ${title}\n !! no extraction row for this title`); continue; } console.log(`\n## ${venue} ${year} [${sigs}] ${r.slug}\n ${title}`); const f = path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`); if (!fs.existsSync(f)) { console.log(' !! no fulltext'); continue; } const text = fs.readFileSync(f, 'utf8').replace(/\s+/g, ' '); const g = new RegExp(re.source, 'gi'); let m; let shown = 0; const seen = new Set(); while ((m = g.exec(text)) !== null && shown < 3) { const a = Math.max(0, m.index - WIN); const snip = text.slice(a, m.index + WIN); const k = snip.slice(0, 60); if (seen.has(k)) continue; seen.add(k); console.log(` … ${snip} …`); shown += 1; } if (shown === 0) console.log(' !! platform name not found in fulltext'); }
The quote check
- platforms_quotecheck.mjs
// Quote check for design:platforms. Every figure the page publishes from a // paper is listed here with the phrase that must appear in that paper's // paper.cols.txt. Whitespace is collapsed on both sides first: a PDF line break // inside the phrase otherwise produces a false FAIL. // // node scripts/platforms_quotecheck.mjs import fs from 'node:fs'; import path from 'node:path'; import { dataRoot } from './lib.mjs'; const CHECKS = [ ['2026/NDSS/hey-there-you-are-using-whatsapp-enumerating-three-billion-accounts-for-security-and-privacy', 'we discovered a total of 3,546,479,731 accounts'], ['2026/NDSS/hey-there-you-are-using-whatsapp-enumerating-three-billion-accounts-for-security-and-privacy', 'More than 57 % of world users have a public profile picture'], ['2024/IMC/beyond-the-guidelines-assessing-metas-political-ad-moderation-in-the-eu', 'only 7.7% of undeclared political ads'], ['2024/IMC/beyond-the-guidelines-assessing-metas-political-ad-moderation-in-the-eu', '60.4% of ads moderated by Meta did not align'], ['2024/IMC/beyond-the-guidelines-assessing-metas-political-ad-moderation-in-the-eu', 'Digital Services Act'], ['2024/WWW/tiktok-and-the-art-of-personalization-investigating-exploration-and-exploitation', "exploits real users' interests in between 30% and 50%"], ['2026/PETS/banned-books-analysis-of-censorship-on-amazon-com', 'We found 17,842 products that Amazon restricted'], ['2023/IMC/flocking-to-mastodon-tracking-the-great-twitter-migration', 'the Mastodon accounts of 136,009 Twitter users'], ['2026/PETS/a-year-under-the-dsa-ad-transparencys-uneven-landscape', '48, 511 ad explanations collected across four platforms'], ['2026/PETS/a-year-under-the-dsa-ad-transparencys-uneven-landscape', 'Who Targets Me'], ['2026/WWW/does-this-button-work-investigating-youtubes-ineffective-user-controls', 'Bad Recommendation rate was about 2.3%'], ['2025/USENIX/please-dont-send-that-bot-anything-a-mixed-methods-study-of-personal-impersonati', 'very small for the Basic tier'], ['2026/WWW/longitudinal-trends-in-global-climate-change-discourse-on-facebook', 'the tool was discontinued in 2024'], ['2025/WWW/exposing-cross-platform-coordinated-inauthentic-activity-in-the-run-up-to-the-20', '(the now defunct) Crowdtangle'], ['2023/WWW/the-thin-ideology-of-populist-advertising-on-facebook-during-the-2019-eu-electio', 'Meta (previously Facebook) Ad Library'], ['2019/WWW/auditing-offline-data-brokers-via-facebooks-advertising-platform', 'over 90% of targetable Facebook identities'], // 2026-08-27: the extraction's paraphrase ("only t.co and twitter.com are // throttled") is NOT in the paper; the paper's own wording is the SNI list. // Replaced rather than published. ['2021/IMC/throttling-twitter-an-emerging-censorship-technique-in-russia', 'throttling is triggered upon observing Twitter-related domains (*.twimg.com, twitter.com, t.co) in the SNI'], ['2021/NDSS/all-the-numbers-are-us-large-scale-abuse-of-contact-discovery-in-mobile-messengers', '10 % of all US mobile phone numbers for WhatsApp and 100 % for Signal'], ['2024/IEEE-SP/a-picture-is-worth-500-labels-a-case-study-of-demographic-disparities-in-local-m', 'age prediction fails drastically for individuals below 19'], ['2026/IEEE-SP/setting-the-course-but-forgetting-to-steer-analyzing-compliance-with-gdprs-right', 'all three platforms fail to report this information'], // Column splice: the sentence is interleaved with the adjacent column, so the // full sentence cannot be matched. Two shorter contiguous fragments can. ['2025/IMC/exploration-of-the-dynamics-of-buy-and-sale-of-social-media-accounts', 'of social media platforms in blocking these accounts was 19.71%'], ['2025/IMC/exploration-of-the-dynamics-of-buy-and-sale-of-social-media-accounts', 'All 11,457 2,259 19.71'], // Column splice again: use contiguous fragments. ['2026/NDSS/revealing-the-secret-power-how-algorithms-can-influence-content-visibility-on-twitter-x', 'order of magnitude (0.0069 vs. 0.084)'], ['2026/NDSS/revealing-the-secret-power-how-algorithms-can-influence-content-visibility-on-twitter-x', 'been restricted since June 2023'], ['2024/CCS/modern-problems-require-modern-solutions-community-developed-techniques-for-onli', '137 videos and 4,297 comments on TikTok'], ['2025/USENIX/darkgram-a-large-scale-analysis-of-cybercriminal-activity-channels-on-telegram', 'now replaced by the Meta Content Library'], ]; const norm = (s) => s.replace(/\s+/g, ' ').trim(); let pass = 0; let fail = 0; for (const [rel, phrase] of CHECKS) { const [year, venue, slug] = rel.split('/'); const f = path.join(dataRoot(), `fulltext/${year}/${venue}/${slug}/paper.cols.txt`); if (!fs.existsSync(f)) { console.log(`MISSING ${rel}`); fail += 1; continue; } const t = norm(fs.readFileSync(f, 'utf8')); const ok = t.includes(norm(phrase)); console.log(`${ok ? 'PASS' : 'FAIL'} ${venue} ${year} ${JSON.stringify(phrase)}`); ok ? (pass += 1) : (fail += 1); } console.log(`\n${pass} pass, ${fail} fail, of ${CHECKS.length} checks`);
Probes that had to be rewritten, and the wrong numbers they gave first
Four of the eighteen full-text probes were wrong on the first run. Each produced a plausible number.
| Probe | First regex | What it matched by mistake | Effect |
|---|---|---|---|
| terms of service | terms of (service\|use) | "in **terms of us**er pairs" | 147 platform-subject hits became 134 after adding a word boundary after use |
| Digital Services Act | \bDSA\b | the DSA signature algorithm — ".RSA or .DSA file under META-INF/" | 27 platform-subject hits became 15 for the narrowed Digital Services Act\|Article 40 form, and the page uses the even narrower Digital Services Act count of 25 over the whole corpus |
| ad archive | Ad(vert(ising)?)? Library | the Android advertising library — "Google's AdMob advertising library" | 56 platform-subject hits, mostly false; replaced with a regex requiring a platform name or Ad Library API |
| YouTube family | youtube\|\byt\b | \byt\b as an abbreviation anywhere | dropped \byt\b entirely before any figure was computed |
One probe was abandoned rather than narrowed, and this is the most important entry in this section:
/Article 40\|vetted researcher/ returned 19 papers. We hand-checked all 19 and exactly one is on point. The other 18 are:
- ACM reference numbers —
"Queue 10, 11, Article 40, 10 pages","Comput. Surveys 48, 3, Article 40","CHI '22 ... Article 400/404/407/409"(11 papers) - GDPR Article 40 codes of conduct, not DSA Article 40 (1 paper: PETS 2023 Data Security on the Ground)
- “vetted researchers” meaning artefact release on request —
"we will share our code with vetted researchers upon publication","open-sourced to vetted researchers and vendors upon request"(4 papers) - “vetted researchers” meaning someone else's access programme — Censys (
"provides vetted researchers with access to a search engine of Internet-wide scanning results") and the Twitter 1% stream (2 papers)
The one on-point hit is [1McCrosky, Jesse; Malla, Ranadheer; Tanskanen, Aapo; Camargo, Chico Q. (2026): "Does This Button Work? Investigating YouTube's Ineffective User Controls", in: Proceedings of the ACM Web Conference. (DOI)], which discusses proposed vetted-researcher mandates rather than using one. So the publishable claim is “essentially nobody in these seven venues has used the DSA Article 40 route”, and the count 19 is published only as the probe's raw output with this audit attached. A page that had printed “19 papers engage with DSA Article 40” would have been wrong by a factor of nineteen.
The folds and their residue
Fold 1: platform name to (family, role)
Rules are in plat_fold.mjs above, ordered most-specific-first. Aggregate result over population[].sourceList:
| Role assigned | Distinct strings |
|---|---|
subject | 515 |
ranking (the Alexa top-sites list) | 331 |
recruitment | 295 |
infrastructure | 26 |
operator | 4 |
mlservice | 2 |
falsepos | 1 |
| total distinct strings matching any platform token | 1,174 |
The full string-by-string assignment follows. This is the residue: nothing is hidden behind a summary. Reproduce with node scripts/platforms_report.mjs --dump. Columns are: papers, role, family (or families, pipe-separated), the verbatim string.
- platforms_fold_dump.txt
# every distinct population.sourceList string that matched a platform token: 1174 143 subject Google (Play/Search/Ads) "Google Play" 77 subject Google (Play/Search/Ads) "Google Play Store" 68 recruitment Amazon "Amazon Mechanical Turk" 51 ranking Amazon "Alexa" 18 ranking Amazon "Alexa Top 1M" 17 ranking Amazon "Alexa top 1 million" 16 recruitment Amazon "Alexa top 1M" 14 ranking Amazon "Alexa top 100" 14 ranking Amazon "Alexa top 10,000" 14 subject Reddit "Reddit" 13 subject YouTube "YouTube" 12 subject Twitter/X "Twitter API" 12 recruitment Amazon "Amazon Mechanical Turk (MTurk)" 11 recruitment Apple App Store "Apple App Store" 9 ranking Amazon "Alexa top websites" 8 recruitment Amazon "Alexa Top 100" 8 subject Twitter/X "Twitter" 7 subject Reddit "Pushshift" 6 subject Flickr "Flickr" 6 ranking Amazon "Alexa top sites" 6 recruitment Amazon "Amazon's Mechanical Turk" 6 subject Amazon "Amazon" 6 ranking Amazon "Alexa Top 10,000" 6 ranking Amazon "Alexa top 100K" 6 recruitment Amazon "Alexa Top Sites" 6 subject Apple App Store "App Store" 5 subject Meta (Facebook/Instagram/WhatsApp) "Facebook" 5 subject Twitter/X "Twitter Streaming API" 5 ranking Amazon "Alexa ranking" 5 ranking Amazon "Alexa Top 1 Million" 5 ranking Amazon "Alexa top 1000" 5 ranking Amazon "Alexa Top 500" 5 ranking Amazon "Alexa Top Million" 5 subject Google (Play/Search/Ads) "Google Search" 5 subject Yelp "Yelp" 4 subject Twitter/X "Twitter streaming API" 4 ranking Amazon "Alexa.com" 4 subject Google (Play/Search/Ads) "Google Play store" 4 ranking Amazon "Alexa Top 50" 4 subject LinkedIn "LinkedIn" 4 subject eBay "eBay" 4 ranking Amazon "Alexa top 500" 4 ranking Amazon "Alexa Top-1M" 4 subject Meta (Facebook/Instagram/WhatsApp) "Instagram" 4 ranking Amazon "Alexa top 10K websites" 4 ranking Amazon "Alexa top 10K" 4 ranking Amazon "Alexa Top 100K" 4 recruitment Amazon "Alexa top 1 million list" 3 ranking Amazon "Alexa top sites by category" 3 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook users" 3 recruitment Google (Play/Search/Ads) "Google Play Market" 3 ranking Amazon "Alexa Top 1000" 3 ranking Amazon "Alexa top 1 million websites" 3 recruitment Amazon "Amazon.com" 3 recruitment Amazon "Mechanical Turk" 3 subject Google (Play/Search/Ads) "Google search results" 3 ranking Amazon "Alexa list" 3 ranking Amazon "Alexa Top 100k" 3 ranking Amazon "Alexa's top 100 websites" 3 ranking Amazon "Alexa top 1,000 websites" 3 recruitment Amazon "Alexa top-100K" 3 ranking Amazon "Alexa top 50" 3 ranking Amazon "Alexa top-10K" 3 ranking Amazon "Alexa top 10,000 domains" 3 recruitment Amazon "Amazon MTurk" 3 subject Steam "Steam-200K" 3 ranking Amazon "Alexa Top list" 2 subject Meta (Facebook/Instagram/WhatsApp) "Facebook regional networks" 2 ranking Amazon "Alexa top 1000 websites" 2 ranking Amazon "Alexa list of most used websites" 2 ranking Amazon "Alexa 1M" 2 ranking Amazon "Alexa's list" 2 infrastructure Amazon "Amazon EC2" 2 ranking Amazon "Alexa Top 1 Million Domains" 2 subject Google (Play/Search/Ads) "Google Play market" 2 ranking Amazon "Alexa top 10,000 websites" 2 ranking Amazon "Alexa Top 100 websites" 2 subject Apple App Store "iOS App Store" 2 subject WeChat/Weibo/QQ "Tencent" 2 subject Twitter/X "Twitter's streaming API" 2 ranking Amazon "Alexa top ranking" 2 subject Google (Play/Search/Ads) "Google AdWords campaign" 2 subject Yelp "Yelp dataset" 2 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook application" 2 ranking Amazon "Alexa Top 10k" 2 ranking Amazon "Alexa top 100,000 domains" 2 ranking Amazon "Alexa top 500 sites" 2 recruitment Amazon "Alexa Top 50 websites" 2 ranking Amazon "Alexa top million" 2 ranking Amazon "Alexa top 1,000" 2 ranking Amazon "Alexa top 20K websites" 2 ranking Amazon "Alexa top 100 sites" 2 ranking Amazon "Alexa Top Million domains" 2 ranking Amazon "Alexa top-100K websites" 2 ranking Amazon "Alexa rankings" 2 ranking Amazon "Alexa's top 10,000 websites" 2 ranking Amazon "Alexa top 1M list" 2 ranking Amazon "Alexa Top 10K" 2 recruitment Amazon "Amazon Mechanical Turk and Prolific Academic" 2 subject Twitter/X "Twitter 1% Streaming API" 2 ranking Amazon "Alexa top 1m" 2 mlservice Amazon "Amazon Rekognition API" 2 ranking Amazon "Alexa Top-100K" 2 ranking Amazon "Alexa top 1-million websites" 2 ranking Amazon "Alexa Top 1,000,000 Sites" 2 recruitment Reddit "pushshift.io" 2 ranking Amazon "Alexa top 100k" 2 ranking Amazon "Alexa Top 1 million" 2 subject Netflix "Netflix" 2 subject Apple App Store "Google App Store" 2 ranking Amazon "Alexa 10k" 2 subject Meta (Facebook/Instagram/WhatsApp) "Facebook groups" 2 subject Google (Play/Search/Ads) "Google search" 2 ranking Amazon "Alexa top 1,000,000 sites" 2 recruitment Amazon "US Alexa skill store" 2 ranking Amazon "Alexa top 1,000 domains" 2 subject Google (Play/Search/Ads) "Google Search API" 2 recruitment Amazon "MTurk" 2 ranking Amazon "Alexa top-10K websites" 2 subject Twitch "Twitch" 2 ranking Amazon "Alexa top 10k" 2 subject Google (Play/Search/Ads) "Google Play and WanDouJia" 2 subject Apple App Store "SideQuest app store" 2 subject Twitter/X "Twitter15" 2 subject Twitter/X "Twitter16" 2 subject Flickr "Flickr30k" 2 ranking Amazon "Alexa top 100 websites" 2 subject Steam "Steam" 2 ranking Amazon "Alexa top 20,000" 2 recruitment WeChat/Weibo/QQ "WeChat groups" 2 subject YouTube|Google (Play/Search/Ads) "YouTube Data API" 1 ranking Amazon "Alexa top sites/category/Top/News" 1 subject Twitter/X "Twitter APIs" 1 ranking Amazon "Alexa global top 50,000" 1 ranking Amazon "Alexa global top 100" 1 ranking Amazon "Alexa global top 1,300" 1 infrastructure Amazon "Amazon AWS, Microsoft Azure, Google AppEngine, and Rackspace CloudServers" 1 ranking Amazon "Alexa top sites and embedded-content domains" 1 ranking Amazon "embedded domains extracted from Alexa-ranked hosts" 1 subject Twitter/X "Twitter public accounts" 1 subject Twitter/X "blacklist-flagged Twitter accounts" 1 subject YouTube "captured YouTube video requests at a university network gateway" 1 subject YouTube "YouTube featured videos" 1 subject YouTube "YouTube crawl datasets D1 and D2" 1 ranking Amazon "top 500 alexa.com domain names" 1 ranking Amazon "top 10,000 Alexa domain names" 1 ranking Amazon "top 100,000 Alexa domain names" 1 recruitment Amazon "Alexa Top 200" 1 recruitment Flickr "Flickr.com" 1 ranking Amazon "Alexa top 100 websites plus Alexa category rankings" 1 ranking Twitter/X|Amazon "Google Hot Searches, Alexa, and Twitter" 1 ranking Amazon "Google Hot Searches and Alexa" 1 subject Twitter/X "Google Hot Trends and Twitter Current Trends" 1 ranking Amazon "Alexa Top 100 Web sites" 1 subject YouTube "YouTube friend social network" 1 subject YouTube "YouTube website popular-uploaders list" 1 subject YouTube "YouTube live system" 1 ranking Amazon "globally routable BGP prefixes and Alexa top 1 million" 1 subject Twitter/X "Twitter dataset gathered in [14]" 1 subject YouTube "YouTube servers in India" 1 ranking Amazon "Alexa Top 1 Million Hosts list" 1 ranking Amazon "two malware feeds, public blacklists, DNSWL, and top 30 Alexa domains" 1 subject Twitter/X "Twitter Monitor collection" 1 ranking Amazon "Alexa's top 90,000 Web sites" 1 recruitment Amazon "friends and mturk.com" 1 infrastructure Amazon "Amazon EC2 us.east-1c" 1 ranking Amazon "Alexa Top 1000 web pages" 1 ranking Amazon "Alexa Top 1000 web pages, cleaned top 800 URLs" 1 subject Amazon "commercial rankings (Amazon.com and Download.cnet.com) combined with Thepiratebay.org download numbers" 1 subject Meta (Facebook/Instagram/WhatsApp) "top 250 Facebook applications" 1 recruitment Netflix "Hulu, Netflix, and Vudu" 1 ranking Amazon "Alexa list of the one-million most popular websites" 1 ranking Amazon "alexa.com" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "Twitter and Facebook announcements; direct recruitment through non-technical disciplines" 1 subject Twitter/X "Twitter public timeline" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook Public directory" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "custom Facebook application" 1 ranking Amazon "Alexa and live successful-DNS-query collection" 1 recruitment Amazon "Alexa's 100 most visited global sites" 1 recruitment Amazon "Amazon's Mechanical Turk crowdsourcing service (MTurk)" 1 subject Twitter/X "A Twitter mention network" 1 subject Twitter/X "the same Twitter mention network" 1 ranking Amazon "Alexa top 5000" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook users in the U.S." 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook users who never viewed security announcements" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook friendship graph from the New Orleans regional network [33]" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook interaction graph from the New Orleans regional network [33]" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "custom-developed Facebook App" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook datasets" 1 subject Twitter/X "Twitter Firehose stream issued to Yahoo!" 1 recruitment Amazon "schools of engineering and business in two universities and Amazon's Mechanical Turk" 1 ranking Amazon "custom collection from Alexa Top 100 websites" 1 subject Amazon "Amazon-derived candidate groups" 1 subject Flickr "Flickr public API" 1 ranking Amazon "Alexa top 500 domains" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook Open Graph" 1 subject Yelp "six online review communities: Expedia, Hotels.com, Orbitz, Priceline, TripAdvisor, and Yelp" 1 subject Apple App Store "Windows App Store" 1 subject Google (Play/Search/Ads) "Google search query \"login.php\"" 1 subject Twitter/X "Twitter suspended accounts" 1 subject Twitter/X "Twitter suspended accounts with blacklisted shortened URLs" 1 subject Twitter/X "random sample of Twitter users" 1 subject Twitter/X "Twitter Search APIs" 1 ranking Amazon "Alexa top 60,000 site list" 1 ranking Amazon "Alexa top 800 sites" 1 ranking Amazon "Alexa top 100 pages" 1 ranking Amazon "Alexa Top 50 web pages" 1 recruitment Twitter/X "dataset from our previous Twitter spam account detection study [35]" 1 recruitment Twitter/X "public entire Twitter snapshot [25]" 1 subject WeChat/Weibo/QQ "ZBJ Weibo campaigns" 1 subject WeChat/Weibo/QQ "Weibo social graph" 1 ranking Amazon "Alexa top 100,000 sites" 1 subject LinkedIn "LinkedIn member subset" 1 subject Google (Play/Search/Ads) "Google Play, SoftAndroid, ProAndroid, Anzhi, Ndoo, Contagio, Zhou et al., and M1" 1 ranking Amazon "Alexa top 10,000 most popular web sites" 1 ranking Amazon "Alexa Top 1000 websites" 1 subject Twitter/X "public Twitter accounts" 1 subject Twitter/X "custom sample of collected tweets" 1 subject Twitter/X "Twitter from linked Foursquare accounts" 1 ranking Amazon "transitive trust dependencies of Alexa domains and TLDs" 1 subject Google (Play/Search/Ads) "Google's Play Store" 1 recruitment Amazon "Google Products, Amazon and Shopping.com" 1 ranking Amazon ".com zone file and Alexa list" 1 ranking Amazon "Alexa top/mid/tail domains and .com zone file" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook's people directory" 1 subject Twitter/X "Twitter dataset" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook SIGCOMM and COSN groups" 1 ranking Amazon "Alexa top global sites" 1 ranking Amazon "Alexa top 100,000" 1 ranking Amazon "Alexa top 3,000" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook and Instagram" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "university campus and online-media (Facebook & Twitter)" 1 recruitment Amazon "Alexa top 20 sub-categories" 1 ranking Amazon "Alexa top one million sites" 1 subject Apple App Store "MAC App Store" 1 ranking Amazon "Alexa's top 1 million sites" 1 infrastructure Amazon "DNS-CDN-enabled sites identified from Alexa's top 1 million" 1 recruitment Amazon "university and Amazon Mechanical Turk" 1 subject Twitter/X "Twitter, crowdturfing sites, and black-market sites" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook interaction graph from the New Orleans regional network" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "publicly available data from Facebook" 1 ranking Amazon "Alexa top 25; three social networks popular in Arabic-speaking countries" 1 subject Apple App Store "iTunes preview" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook pages created by the authors" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook public directory" 1 ranking Amazon "Alexa Top 500 web sites" 1 ranking Amazon "Alexa Top 25 web sites" 1 ranking Amazon "Alexa Top 50 web sites" 1 ranking Amazon "Alexa top 1000 URL" 1 ranking Amazon "Alexa top one million websites" 1 ranking Amazon "Alexa DB" 1 ranking Amazon "Alexa's, MajesticSEO's, and QuantCast's top 1 million lists" 1 subject Google (Play/Search/Ads) "Google Play and other 12 popular third-party app markets worldwide" 1 ranking Amazon "Alexa Top 20" 1 ranking Amazon "Alexa top 68 U.S. sites" 1 ranking Amazon "Alexa's one million top-ranked websites list" 1 subject Google (Play/Search/Ads) "Google Play Store, Crawl 1" 1 subject Google (Play/Search/Ads) "Google Play Store, Crawl 2" 1 subject Google (Play/Search/Ads) "Google Play Store, Crawl 3" 1 recruitment Amazon "LBNL, ICSI, NERSC, and an Amazon EC2 honeypot" 1 ranking Amazon "Alexa Top 10,000 websites" 1 ranking Amazon "Alexa Top 50 websites in the US" 1 ranking Amazon "Alexa Top 5,000 websites" 1 ranking Amazon "Alexa top 10 K domains" 1 ranking Amazon "top-1000 Alexa websites" 1 subject Google (Play/Search/Ads) "Google search index" 1 ranking Amazon "VeriSign .com/.net zone files and Alexa Top 1 Million" 1 ranking Amazon "Alexa Top 1 Million websites" 1 ranking Amazon "combined EFF/Alexa crawl" 1 subject LinkedIn "LinkedIn list" 1 subject Google (Play/Search/Ads) "GooglePlay Store" 1 recruitment Amazon|Apple App Store "Amazon's Android app store" 1 ranking Amazon "Alexa top 500 websites for the U.S." 1 ranking Amazon "Alexa top million Web sites" 1 ranking Amazon "Alexa's top 500 websites" 1 ranking Amazon "Alexa ranking; May 2015" 1 subject Amazon "Google top 100 search queries; Amazon and Walmart top 100 best-selling products" 1 ranking Amazon "Alexa top 15" 1 recruitment Google (Play/Search/Ads) "Google Play Store, “top free” category" 1 recruitment Google (Play/Search/Ads) "Google Play Store, apps described as app-lockers" 1 subject Google (Play/Search/Ads) "Google search results, Black Hat World, and traffic exchange ranking lists" 1 ranking Amazon "Alexa Top 1,000,000 websites list" 1 subject Twitter/X "custom random Twitter account sample" 1 subject Twitter/X "Twitter follower network from four seed impersonating identities" 1 recruitment Amazon "Amazon's Mechanical Turk (MTurk)" 1 ranking Amazon "Alexa's top 50 websites in China" 1 ranking Amazon "Alexa web sites" 1 infrastructure Amazon "Amazon EC2 published IP ranges" 1 infrastructure Amazon "custom launched EC2 instances" 1 ranking Amazon "Alexa top 3K websites" 1 ranking Amazon "Alexa top 500 category lists" 1 subject Google (Play/Search/Ads) "Google Play, collected by the TACYT application" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook1 [45]" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook2 [45]" 1 subject Twitter/X "Twitter [23]" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook wall post dataset in [34]" 1 ranking Amazon "Alexa top 500 websites in each category" 1 subject Steam "Steam Web API" 1 subject Steam "Steam catalog" 1 subject Steam "same Steam users" 1 subject Steam "same Steam user set" 1 subject Steam "Steam games" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook (New Orleans)" 1 subject YouTube "YouTube (Snowball Crawl)" 1 subject Meta (Facebook/Instagram/WhatsApp)|YouTube "Facebook, YouTube, and Renren sampled node sets" 1 ranking Amazon "Alexa's 8 \"News and Media\" categories" 1 subject Google (Play/Search/Ads) "Google Play Store and featured/recommended apps" 1 subject Google (Play/Search/Ads) "Google AdWords top websites" 1 ranking Amazon "Alexa top 1 million domains" 1 recruitment Apple App Store "App Store app volunteers" 1 ranking Amazon "Alexa's top 5,000 pages" 1 ranking Amazon "Alexa's top 100 sites" 1 subject Twitter/X "Twitter's public stream" 1 recruitment Amazon "Mechanical Turk (prior research studies)" 1 ranking Amazon "Alexa top one million Web sites" 1 ranking Amazon "Alexa historical API and archived Alexa top-100 pages" 1 ranking Amazon "Alexa top 500 sites ground-truth datasets" 1 ranking Amazon "Alexa's top 20,000 web sites" 1 ranking Amazon "Alexa's top 100 web sites" 1 ranking Amazon "top 100,000 Alexa web pages" 1 ranking Amazon "Alexa e-commerce categories" 1 ranking Amazon "Alexa Top-1K" 1 ranking Amazon "Alexa Top-5K" 1 subject Google (Play/Search/Ads) "Google Play, filtered reviewed items" 1 subject YouTube "anonymized aggregate YouTube user activity logs" 1 subject YouTube "YouTube abuse team" 1 subject Google (Play/Search/Ads) "Google Play Store and six online sources: Androidapps, Apkhere, Apkmirror, Apkpure, Uptodown, and Aptoide" 1 subject Google (Play/Search/Ads) "Google Play Store and third-party websites" 1 subject Google (Play/Search/Ads) "Google Play and third-party Android markets" 1 subject Google (Play/Search/Ads) "Google Play and third-party Android markets plus VirusTotal" 1 subject Google (Play/Search/Ads) "Google Play top-ranked apps" 1 subject Google (Play/Search/Ads) "Google Play categories" 1 subject Google (Play/Search/Ads) "Google Play Store and PlayDrone matched applications" 1 subject Meta (Facebook/Instagram/WhatsApp) "Instagram API" 1 recruitment Google (Play/Search/Ads) "US Google Play Store" 1 ranking Amazon "Alexa top 500 U.S. sites" 1 ranking Amazon "Alexa top 1 M list" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook Apps Leaderboard" 1 ranking Amazon "custom seed list (PremiumDrops, ViewDNS, Alexa, Umbrella, and ICANN Centralized Zone Data Service)" 1 ranking Amazon "Alexa top-5K websites" 1 ranking Amazon "Alexa top-5K retrospective measurement" 1 ranking Amazon "Alexa top-1,000 sites" 1 ranking Amazon "Alexa top-25,000 sites" 1 ranking Amazon "Alexa top-30,000" 1 ranking Amazon "Alexa top-500 sites" 1 ranking Amazon "Alexa's top websites worldwide" 1 ranking Amazon "Alexa's top 1 million domain names" 1 subject Google (Play/Search/Ads) "Google Play Store (US site)" 1 subject Google (Play/Search/Ads) "Google Play Store privacy-policy links" 1 subject Google (Play/Search/Ads) "Google Play Store (popular apps)" 1 ranking Amazon "Alexa Top 75 k domains" 1 ranking Amazon "Alexa top 100K websites" 1 ranking Amazon "Alexa top-1K websites" 1 subject Uber "a data-set of GPS traces of Uber black cars rides in San Francisco [32]" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "custom purposive selection of Facebook Messenger, Instagram, and Twitter" 1 ranking Amazon "Alexa top 50 and Alexa-ranked websites" 1 ranking Amazon "Alexa-ranked websites" 1 ranking Amazon "Alexa-ranked webpages" 1 recruitment Google (Play/Search/Ads) "Google Play store, Ubuntu Software Center and Chrome Extensions" 1 recruitment Amazon "Amazon Mechanical Turk and Survey Sampling International" 1 ranking Amazon "combined CLBL and Alexa domain set" 1 ranking Amazon "Alexa Top 100 Global" 1 ranking Amazon "Alexa Million" 1 ranking Amazon "union of Alexa top 1 million and app-extracted domains" 1 ranking Amazon "Alexa Top-500 start pages" 1 recruitment Twitter/X "Twitter active users" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "websites including Twitter, Facebook, Quora, Hacker News, and Freedom to Tinker" 1 ranking Amazon "top 100k Alexa domains" 1 ranking Amazon "Alexa top 50,000" 1 ranking Amazon "top 50,000 Alexa websites" 1 ranking Amazon "Alexa top 5K" 1 recruitment Google (Play/Search/Ads) "custom selection from Google Play" 1 recruitment Google (Play/Search/Ads) "Google Play accounts revealed by 23 fraud workers" 1 recruitment Google (Play/Search/Ads) "Google Play reviews of 640 apps" 1 ranking Amazon "Alexa 1-100" 1 ranking Amazon "Alexa 1-2000" 1 ranking Amazon "Alexa Internet top 100 ranking" 1 recruitment Amazon "Alexa top-50 popular websites" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "friends and family members with active Facebook accounts" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "friends and family members with Facebook accounts" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "mailing lists, a local neighborhood Facebook group, and personal contacts" 1 ranking Amazon "Alexa Global Top 1M" 1 infrastructure Amazon "AWS VMs" 1 ranking Amazon "Alexa Top Categories" 1 ranking Amazon "combined Alexa sample after deduplication" 1 ranking Amazon "Alexa Top-1M certificates and CRL URLs" 1 subject Reddit "Reddit Pushshift (The_Donald subreddit)" 1 ranking Amazon "Alexa Top 1 Million Global Sites" 1 ranking Amazon "Alexa top-1000 sites" 1 recruitment Amazon "institutional mailing lists, social media, and Amazon Mechanical Turk" 1 ranking Amazon "Alexa top 100 popular websites" 1 ranking Amazon "Alexa top 101-200" 1 recruitment Google (Play/Search/Ads) "Google Play Store, emails to targeted participants, and social networking platforms" 1 subject Google (Play/Search/Ads) "Google Play Store's Designed for Families program" 1 subject Meta (Facebook/Instagram/WhatsApp) "synthetic Facebook password-reset emails" 1 subject YouTube "YouTube-curated Top Shared and Liked playlist" 1 subject YouTube "YouTube recorded live chat videos" 1 subject YouTube "Live YouTube-curated list" 1 recruitment Amazon "Alexa top 5000 domains" 1 ranking Amazon "Alexa top 25 websites" 1 subject Amazon "third-party Alexa skill-name aggregation database" 1 ranking Amazon "Alexa Top 500 websites" 1 ranking Amazon "Alexa list of top websites" 1 ranking Amazon "Alexa list of top sites" 1 ranking Amazon "Alexa Top 50,000 domains" 1 ranking Amazon "Alexa 100k top websites" 1 subject Twitter/X "custom Twitter search for “first AA meeting”" 1 subject Twitter/X "custom Twitter-filtered population" 1 subject Twitter/X "Twitter friend network" 1 subject Twitter/X "Twitter API collection" 1 ranking Amazon "Alexa top one million" 1 subject Twitter/X "exhaustive list of 400 keywords via Twitter streaming API" 1 subject Twitter/X "Twitter streaming data" 1 subject Twitter/X "Twitter accounts checked through Twitter API" 1 subject Twitter/X "3,370 Twitter campaigns with at least one suspended user" 1 subject Twitter/X "3,370 Twitter campaigns" 1 ranking Amazon "one of the top 15 French websites (according to the Alexa traffic rank)" 1 ranking Amazon "Alexa Top 1 million ranking" 1 subject Meta (Facebook/Instagram/WhatsApp) "Instagram public API" 1 ranking Amazon "Alexa Top 1M Websites" 1 subject WeChat/Weibo/QQ "WeChat" 1 subject Google (Play/Search/Ads) "Google Search RTBF requests" 1 ranking Amazon "Alexa dataset" 1 recruitment Amazon "Alexa top 1 Million Sites" 1 subject YouTube "YouTube's Music category" 1 ranking Amazon "Alexa top 1 million website list" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook ASO groups, Upwork, Fiverr, Zeerk, and Peopleperhour" 1 recruitment Google (Play/Search/Ads) "custom worker-revealed Google Play account IDs" 1 recruitment Google (Play/Search/Ads) "custom worker-revealed Google Play apps" 1 recruitment Google (Play/Search/Ads) "custom worker-controlled Google Play reviews" 1 subject Amazon "Amazon Fire TV channel store" 1 recruitment Amazon "Alexa top-500" 1 recruitment Amazon "Amazon Alexa skill market" 1 recruitment Amazon "Alexa skill market" 1 recruitment WeChat/Weibo/QQ "Chinese third-party markets (Baidu, Xiaomi, Huawei, Tencent)" 1 recruitment Google (Play/Search/Ads) "Google Play and Baidu market" 1 subject Yelp "Yelp dataset (Yelp-health and Yelp-author subsets)" 1 subject Netflix "Netflix Prize data set" 1 ranking Amazon "Alexa list of popular websites" 1 recruitment Apple App Store "Apple Store and other contributed devices" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "anonymized Facebook log records" 1 recruitment Amazon "Alexa top-20" 1 subject WeChat/Weibo/QQ "Sina Weibo" 1 ranking Amazon "Alexa global ranking" 1 subject Twitter/X "Twitter social graph dataset" 1 ranking Amazon "Alexa Web Information Service (AWIS)" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook production traffic" 1 ranking Amazon "toplists.github.io / Alexa rankings" 1 subject Twitter/X "BGPStream Twitter account" 1 ranking Amazon "Alexa Adult category" 1 ranking Amazon "Alexa rank throughout 2018, keyword-matched URLs" 1 ranking Amazon "Alexa top-1M sites" 1 ranking Amazon "Alexa top-100 websites" 1 ranking Amazon "Alexa top 50k" 1 ranking Amazon "Alexa Top 1M list" 1 subject Twitter/X "Twitter dataset from Wang et al. [17]; directed follower-followee graph collected by Kwak et al. [52]" 1 subject WeChat/Weibo/QQ "Sina Weibo dataset from Fu et al. [16]" 1 subject Yelp "Yelp dataset from [25]" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook graph with synthetic Sybils" 1 ranking Amazon "Alexa Top 50 Global and United States lists" 1 ranking Amazon "Bing results for Alexa domains" 1 recruitment Amazon "Amazon Alexa Skill Store" 1 subject Twitter/X "custom Twitter dataset" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "university emails and student-focused Facebook groups" 1 ranking Amazon "Alexa top 5K websites" 1 ranking Amazon "Alexa top 50K websites" 1 recruitment Google (Play/Search/Ads) "custom crowdsourcing deployment via Google Play" 1 ranking Amazon "Alexa country rankings" 1 ranking Amazon "Alexa Top Global Sites" 1 recruitment Twitter/X "custom seed list (Twitter snowball crawl)" 1 recruitment Twitter/X "same Twitter users as 2016 crawl" 1 recruitment Twitter/X "Twitter API trending topics" 1 recruitment Twitter/X "9 active Twitter chatbots" 1 recruitment YouTube "Kaggle YouTube Comments dataset" 1 subject Twitter/X "Twitter 1% random sample" 1 subject Twitter/X "Twitter's Streaming API" 1 ranking Amazon "Alexa top sites list in the United States" 1 ranking Amazon "Alexa top 150" 1 ranking Amazon "Alexa websites ranked between 200 and one million" 1 subject Google (Play/Search/Ads) "Google search query traffic" 1 ranking Amazon "Alexa list of most popular sites" 1 recruitment Amazon "Amazon Mechanical Turk (AMT)" 1 subject Google (Play/Search/Ads) "U.S. Google Play Store" 1 ranking Amazon "Alexa top 250K websites" 1 recruitment Google (Play/Search/Ads)|Apple App Store "Google Play and iTunes stores" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "custom recruitment via local mailing lists, Craigslist, Twitter, and local Facebook groups" 1 ranking Amazon "Alexa top 25 thousand domains" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook ads" 1 subject Apple App Store "iTunes Preview" 1 subject Apple App Store "Apple App Store charts, top paid app list" 1 subject Twitter/X "custom Twitter event datasets" 1 recruitment Amazon "Alexa and publicly-available datasets" 1 subject Reddit "Reddit repository" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook advertising platform" 1 subject Reddit "Reddit archive" 1 subject Netflix "MovieLens and Netflix public rating datasets" 1 subject Twitter/X "Twitter 10% sample" 1 subject Twitter/X "custom curated Twitter lists" 1 subject Twitter/X "custom unlabeled Twitter profiles" 1 subject Twitter/X "Twitter random 10% stream" 1 subject Google (Play/Search/Ads) "Google Play Store Top Free in Android Apps" 1 operator Pinterest "internal dataset from Pinterest" 1 recruitment Apple App Store "iTunes RSS feed" 1 recruitment Apple App Store "iTunes reviews" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook News Feed A/B tests" 1 recruitment Twitter/X "Twitter public API" 1 recruitment Twitter/X "Wikipedia list of most-followed Twitter accounts" 1 recruitment Twitter/X "Twitter users identified in the collected sample and Twitter advertisement" 1 subject Twitter/X "custom disaster tweet collection" 1 subject Reddit "Reddit mental-health-related subreddits" 1 subject Reddit "Reddit SuicideWatch subreddit" 1 subject Reddit "Reddit SuicideWatch and other mental-health subreddits" 1 subject Reddit "Potentially suicidal Redditors" 1 subject Reddit "Pushshift Reddit crawl" 1 subject Twitter/X "follower markets identified through Google and Twitter search" 1 subject Twitter/X "custom seed list (hyperlinks posted on @DefineAmerican and @wginfonetorg Twitter timelines)" 1 subject Twitter/X "custom seed list (top-10 policy issues on Twitter during the 2016 U.S. presidential election campaign)" 1 subject WeChat/Weibo/QQ "WeChat Dataset" 1 subject WeChat/Weibo/QQ "Weibo Dataset" 1 ranking Amazon "Alexa Top 600K" 1 ranking Amazon "Alexa Top 100 Global Sites" 1 subject Twitter/X "Twitter Public Streams" 1 subject Twitter/X "Tweets(Riloff)" 1 subject Twitter/X "Tweets(Ghosh)" 1 subject WeChat/Weibo/QQ "Tencent QQ" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook wall post data collected by Viswanath et al." 1 ranking Amazon "Alexa Top-200K" 1 subject Yelp "Yelp Dataset Challenge" 1 ranking Amazon "Alexa list of popular domains" 1 recruitment Amazon "Amazon Alexa skills store" 1 recruitment Amazon "Alexa top 1k" 1 ranking Amazon "Alexa Top 500 apex domains" 1 ranking Amazon "Alexa Traffic Rank" 1 recruitment LinkedIn "LinkedIn password leak" 1 subject Google (Play/Search/Ads) "Google Play marketplace dataset provided by Norton" 1 subject Google (Play/Search/Ads) "top 200 free non-game Android apps from Google Play" 1 ranking Amazon "Alexa Top 1K" 1 subject Twitter/X "Twitter Search API and Twitter Streaming API" 1 ranking Amazon "Majestic Million, Cisco top 1 Million, historical Alexa top 1 Million, and Censys research dataset" 1 ranking Amazon "Alexa top 100K crawl hash matches" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook's global edge network" 1 infrastructure Meta (Facebook/Instagram/WhatsApp) "Facebook CDN infrastructure" 1 ranking Amazon "Alexa Top Sites by Country" 1 subject YouTube "YouTube URLs in Dissenter data" 1 subject Reddit "NY Times, Daily Mail, and Reddit datasets" 1 subject Reddit "Dissenter usernames matched to Reddit accounts" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook authenticated HTTP(S) requests from logged-in users" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook abusive accounts dataset" 1 recruitment Amazon "Alexa lists collected over time" 1 ranking Amazon "Alexa Top 150" 1 ranking Amazon "Alexa's top million websites list" 1 ranking Amazon "Alexa top million list" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook users in the New Orleans area" 1 ranking Amazon "Alexa top one million site list" 1 recruitment Amazon "Mechanical Turk novice-user suggestions" 1 subject Google (Play/Search/Ads) "Google Play search engine" 1 recruitment Reddit "Reddit VPN sub-communities" 1 ranking Amazon "Alexa Top Million Sites, TFO-supporting hostnames" 1 ranking Amazon "Alexa Top Million Sites, always-TFO-supporting hostnames" 1 ranking Amazon "Alexa.com ranking" 1 ranking Amazon "Alexa top 1-million site crawl" 1 ranking Amazon "Alexa rank" 1 recruitment Amazon "Amazon [com/ca/co.uk]" 1 recruitment Amazon "Alexa TopSites API" 1 recruitment Amazon "Alexa Website Information Service" 1 subject Amazon "Amazon curated list \"Top Featured\" apps" 1 ranking Amazon "Alexa Top websites" 1 ranking Amazon "Alexa Top 5K" 1 subject Meta (Facebook/Instagram/WhatsApp) "Instagram production infrastructure" 1 operator Meta (Facebook/Instagram/WhatsApp) "FACEBOOK infrastructure changesets" 1 subject Meta (Facebook/Instagram/WhatsApp) "FACEBOOK production deletion workload" 1 subject Apple App Store "iTunes App Store" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook, Social Media Privacy, and the Use and Abuse of Data hearing" 1 subject Amazon "Amazon market" 1 subject Reddit "ConvoKit Reddit corpus" 1 subject WeChat/Weibo/QQ "an anonymized user-user transaction data set provided by Tencent" 1 ranking Amazon "Alexa and Cisco Umbrella top sites lists" 1 recruitment Amazon|Reddit "MTurk, literature, and online forums like Reddit" 1 ranking Amazon "Alexa's top 14,000" 1 subject Reddit "LazyKodi, Reddit, GitHub, and kodi.tv" 1 subject Reddit "Kodi addon ecosystem discovered from LazyKodi, Reddit, GitHub, and kodi.tv" 1 ranking Amazon "Alexa top 5000 websites" 1 ranking Amazon "Alexa's Top 10k, Top 100k and Top 1M lists" 1 subject Meta (Facebook/Instagram/WhatsApp) "volunteers using Facebook" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook Ad Library" 1 subject WeChat/Weibo/QQ "Tencent click-through rate prediction data" 1 ranking Amazon "Alexa Top Lists" 1 recruitment Amazon "Alexa top 500 U.S. websites" 1 recruitment Amazon "Alexa top-2,000 U.S. websites" 1 recruitment Amazon "Alexa top-7,000 U.S. websites" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook historical friending data" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook global network" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook network, single country" 1 recruitment LinkedIn "RockYou, LinkedIn, and eHarmony" 1 recruitment Amazon "Alexa US 2019" 1 recruitment Amazon "Alexa UK 2019" 1 recruitment Amazon "Alexa US 2018" 1 subject Amazon "AmazonMovies" 1 subject Amazon "Amazon reviews" 1 subject Yelp "Yelp Dataset reviews" 1 subject Airbnb "Inside Airbnb" 1 subject Reddit "Pushshift Reddit data" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook pages" 1 subject Telegram|Google (Play/Search/Ads) "Google search and Telegram message-board expansion" 1 subject Meta (Facebook/Instagram/WhatsApp)|Telegram "Telegram-hosted Instagram pods" 1 subject Meta (Facebook/Instagram/WhatsApp) "Instagram user identifier space" 1 subject WeChat/Weibo/QQ "public Weibo dataset" 1 recruitment Amazon "Alexa top-10,000" 1 ranking Amazon "1M-top Alexa" 1 subject Amazon "Amazon and JD.COM best-selling smart cameras" 1 subject Google (Play/Search/Ads) "official Google Play market" 1 recruitment Amazon "Amazon, Best Buy, Walmart, and Taobao" 1 ranking Amazon "Alexa Top Sites in United States list" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook groups dedicated to product promotion" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Instagram advertisements" 1 ranking Amazon "Alexa Top 1M List" 1 subject Twitter/X "Russia Twitter throttle dataset" 1 subject Meta (Facebook/Instagram/WhatsApp) "custom phone-number database filtered by libphonenumber and WhatsApp registration API" 1 subject Twitter/X "#Donttweet dataset" 1 recruitment Amazon "Alexa skill stores: US, UK, AU, CA, DE, JP, FR" 1 recruitment Amazon "Amazon, BestBuy, Costco, Walmart, and Home Depot" 1 recruitment Google (Play/Search/Ads)|Apple App Store "Google search results and Apple's US App Store" 1 recruitment Reddit "Upwork, developer websites, Reddit, and iOSoho" 1 ranking Amazon "Alexa Top Sites API" 1 subject Twitter/X "Twitter 1% streaming API" 1 subject Twitter/X "Twitter users" 1 ranking Amazon "Alexa top-1k" 1 ranking Amazon "Alexa top-5k" 1 ranking Amazon "Alexa Top 1M + Cisco Umbrella top 1 million + Majestic Million" 1 recruitment Google (Play/Search/Ads) "Google Play and Apkmonk" 1 ranking Amazon "Alexa website ranking of Germany" 1 recruitment Amazon "Alexa top 10 U.S. websites" 1 recruitment Google (Play/Search/Ads) "Android Play Store" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "local online forums, university-based research participant pool, Facebook, and physical flyers" 1 recruitment Twitter/X "Twitter ad targeting service" 1 recruitment Amazon "Amazon Mechanical Turk pilot studies" 1 subject Google (Play/Search/Ads)|Apple App Store "Google Play Store, Apple App store, and App Annie" 1 recruitment Reddit "local online forums (Craigslist, Reddit, Nextdoor)" 1 recruitment Google (Play/Search/Ads) "Permission Checker (Google Play)" 1 subject Telegram "public fraud-related Telegram channels" 1 operator Meta (Facebook/Instagram/WhatsApp) "Facebook production data" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook active users" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook active accounts" 1 subject Google (Play/Search/Ads) "first returned page of Google search results" 1 recruitment Google (Play/Search/Ads) "Google Play filtered app set" 1 recruitment Google (Play/Search/Ads) "Google Play dynamically analyzed apps" 1 recruitment Telegram "Telegram group of a well-known service provider" 1 subject Apple App Store "SnapPea and Android Market app stores" 1 subject WeChat/Weibo/QQ "Tencent My App" 1 ranking Amazon "Alexa top-ranked websites" 1 recruitment Amazon "Amazon Alexa Top Sites List" 1 recruitment Twitter/X|Reddit "Twitter and Reddit" 1 recruitment Google (Play/Search/Ads) "Google Play, Germany" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook test accounts" 1 subject Google (Play/Search/Ads) "Google Play top paid app list" 1 subject Apple App Store "iTunes store" 1 subject Apple App Store "iOS app store" 1 subject WeChat/Weibo/QQ "Gmail, Hotmail, Yahoo!, and QQ mail" 1 recruitment Twitter/X "random Twitter users" 1 infrastructure Amazon "AWS Lambda account" 1 subject Reddit "Reddit subforums GIF Fakes and SFWDeepFakes" 1 subject YouTube "DF-W YouTube and Bilibili" 1 subject WeChat/Weibo/QQ|Google (Play/Search/Ads) "Google Play and Tencent Myapp" 1 ranking Amazon "Alexa top 100K list" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "local Facebook groups" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "collected public WhatsApp groups from India discussing politics" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook Custom Audience targeting of WhatsApp users" 1 ranking Amazon "Alexa's top 500 domain names" 1 ranking Amazon "Alexa's top 20 domain names and 15 URL shortening services" 1 ranking Amazon "Alexa's top 1 million list" 1 subject Amazon "AOSP, Amazon, Xiaomi and LG" 1 subject Apple App Store "Electron App store" 1 subject Steam "Steam game database" 1 subject Steam "custom Steam game collection" 1 recruitment Reddit "Craigslist, Reddit, and our institution's recruitment website" 1 ranking Amazon "Alexa top-1K list" 1 ranking Amazon "Alexa global top 500 websites (ATL)" 1 infrastructure Amazon "AWS developer guide and blogs" 1 ranking Amazon "Alexa's top 1M domains" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook's Ad Library Report" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook's Ad Library API" 1 recruitment Flickr "COCO2017 and Flickr30k" 1 subject Twitter/X "Twitter Academic API" 1 subject Twitter/X "Twitter-collected images" 1 subject Twitter/X "Twitter-collected SMS spam messages" 1 subject WeChat/Weibo/QQ|Apple App Store "WeChat app store" 1 subject Google (Play/Search/Ads) "Google Play, apkpure.com, and apktada.com" 1 recruitment Amazon "Alexa Top One Million Domain List" 1 recruitment YouTube "Internet (e.g., YouTube)" 1 infrastructure Amazon "Intel processors including the available 1st/2nd/3rd Generation Intel Xeon Scalable Processors on AWS EC2, and five Intel desktop/server processors we own" 1 recruitment Twitter/X|Reddit "professional networks, Reddit, Twitter, Slack, and Upwork" 1 subject Twitch "twitch dataset [29]" 1 recruitment Amazon "AWS IP pool" 1 subject Reddit "Reddit's 2017 transparency report and suspect account findings" 1 subject Reddit "Pushshift public archives" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook ads and online discussion forums" 1 subject Apple App Store "iTunes Search API" 1 subject Apple App Store "Apple App Store listings" 1 ranking Amazon "Alexa top-100K domains" 1 subject Discord "Discord privacy-policy pages" 1 recruitment Amazon "Alexa's top 1M list" 1 ranking Amazon "Alexa, Umbrella, Majestic, Tranco, Secrank, and Trexa top lists" 1 recruitment Amazon "Amazon's MTurk platform and social circles" 1 subject Google (Play/Search/Ads) "apps hosted by several third party app markets including apkpure, an unofficial mirror of Google Play and wandoujia, a major app market in Mainland China" 1 recruitment Amazon "Google Firebase Test Lab and Amazon Device Farm" 1 recruitment Apple App Store "12 working antimalware sandboxes, app stores, and online sandbox services" 1 subject Apple App Store "MacOS App Store" 1 subject Yelp "eight major brokers: Factual, Foursquare, Infogroup, Localeze, Manta, MapQuest, Yellowpage, and Yelp" 1 subject WeChat/Weibo/QQ|Apple App Store "Xiaomi, Baidu, Tencent, and Huawei app stores" 1 subject Google (Play/Search/Ads) "Google Play Store's Top 500 list" 1 ranking Amazon "Similar Web and Alexa Top Sites" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "Facebook Audience Network, Google AdMob, and Twitter MoPub" 1 ranking Amazon "Alexa top 1 million websites worldwide from May 25, 2020" 1 ranking Amazon "Alexa top 1 million websites, .de domains" 1 ranking Amazon "Alexa top 1 million websites, pre-filtered EN and DE sets" 1 recruitment Google (Play/Search/Ads) "Google PlayStore" 1 subject Apple App Store "Apple iTunes Preview / Apple App Store" 1 subject Apple App Store "Fire TV app store" 1 ranking Amazon "Alexa 10K-100K websites" 1 recruitment Amazon "Alexa's Europe region categories" 1 recruitment Reddit "local Craigslist and sub-Reddit forums" 1 recruitment Twitter/X|Reddit "Reddit, Twitter, professional contacts, and snowball referrals" 1 ranking Amazon "Alexa top 30,000 websites" 1 recruitment Amazon "Alexa top and additional organizations" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook Ad Library web portal" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook Ad Library Report" 1 subject Apple App Store "three leading app stores" 1 recruitment Amazon "Alexa top 10000 websites" 1 infrastructure Amazon "Amazon private registry" 1 recruitment LinkedIn "custom collection of LinkedIn profiles" 1 subject Twitter/X "Twitter Filtered Stream API" 1 recruitment Apple App Store "Xiaomi, Huawei, Oppo and Vivo app stores" 1 recruitment Google (Play/Search/Ads) "Google Play's “top 200 free apps” list" 1 ranking Amazon "Alexa top-500 websites" 1 ranking Amazon "Alexa's list of most popular news websites" 1 ranking Amazon "Alexa's top website list" 1 subject Apple App Store "official Oculus app store" 1 ranking Amazon "Alexa top 20K" 1 subject Twitter/X "Robertson et al. Twitter dataset" 1 subject Twitter/X "Robertson et al. Twitter dataset, derived Datt" 1 ranking Amazon "Alexa global website rankings" 1 ranking Amazon "Alexa top 1m list" 1 ranking Amazon "Alexa, Google Assistant, IFTTT, SmartThings, Apple HomeKit, OpenHAB, and HomeAssistant integration lists" 1 mlservice Amazon "Google, Amazon, and IBM text-to-speech APIs" 1 subject YouTube "YouTube Top 100" 1 subject Netflix "Netflix Top 50" 1 subject Amazon "Amazon random movies" 1 subject YouTube "YouTube Top 101-300" 1 ranking Amazon "DE findings from the Alexa Top 10K" 1 ranking Amazon "Alexa's top-100K list" 1 ranking Amazon "Alexa 100K-top domains" 1 subject WeChat/Weibo/QQ "Tencent Kandian Dataset" 1 subject Twitter/X "Twitter API; Election 2020 hashtag collection" 1 subject Twitter/X "Twitter API; Covid-19 hashtag collection" 1 subject Twitter/X "Twitter API; BlackLivesMatter hashtag collection" 1 subject Twitter/X "Twitter API; gun-violence keywords and hashtags" 1 subject WeChat/Weibo/QQ "Weibo" 1 recruitment Twitter/X|Reddit "two Rust-related subreddits, two Rust forums, and one author's Twitter account" 1 recruitment Amazon "Amazon Mechanical Turk, U.S. region" 1 subject WeChat/Weibo/QQ "Tencent Map Service" 1 subject YouTube "YouTube recommendation engine" 1 subject WeChat/Weibo/QQ "Weibo dataset released by Jin et al." 1 subject Reddit "Reddit Hyperlink Network" 1 subject Reddit "publicly available Reddit data presented by Turcan and McKeown" 1 subject Twitter/X "custom Twitter Historical API collection" 1 subject Twitter/X "annotated twitter dataset from [13]" 1 subject Reddit "Pushshift's API" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Instagram Graph API" 1 subject Reddit "custom seed list (15 subreddits from the Daily, Fun, and Health domains)" 1 operator TikTok "server logs of Douyin" 1 subject Steam "Steam dataset" 1 subject Steam "processed Steam dataset" 1 recruitment Reddit "Reddit's comments dump" 1 subject Amazon "Amazon Alexa marketplace" 1 subject Amazon "Amazon Alexa marketplace, US market" 1 subject Amazon "Alexa skills with complete traceability" 1 subject Spotify "Spotify logged feedback data from live traffic" 1 recruitment Amazon "Alexa top million sites" 1 subject YouTube "YouTube dataset" 1 subject Twitter/X "Donald Trump's Twitter account" 1 subject Twitter/X "Twitter replies generated during the specific period" 1 subject Yelp "The Yelp Review Challenge dataset" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook conflict reporting tool" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Kijiji and Facebook" 1 subject Spotify "Spotify's recommendation and search products" 1 ranking Amazon "Media Bias Chart and Alexa ranking" 1 subject Twitter/X "Twitter publisher feeds" 1 subject Flickr "Flickr-Faces-HQ (FFHQ)" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook on-platform survey" 1 subject Yelp "Yelp business dataset" 1 ranking Amazon "Alexa Top 1M domains" 1 ranking Amazon "Alexa 100K domains" 1 recruitment LinkedIn "custom recruitment via interviewee referrals, LinkedIn, and MaiMai" 1 ranking Amazon "Alexa Top 1M, Cisco Umbrella, Majestic Million, and Tranco Research List" 1 subject Meta (Facebook/Instagram/WhatsApp)|Twitch "Cora, Citeseer, Coauthor CS, Facebook, Twitch-ES, LastFM Asia" 1 subject Meta (Facebook/Instagram/WhatsApp) "Meta's CrowdTangle" 1 subject Twitter/X|Meta (Facebook/Instagram/WhatsApp) "FreePhish Twitter and Facebook streams" 1 subject Twitter/X|Meta (Facebook/Instagram/WhatsApp) "Twitter and Facebook daily streams" 1 subject YouTube "YouTube Kids" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "online student communities (Facebook, Twitter and Instagram)" 1 subject Google (Play/Search/Ads) "UK Google Play store" 1 recruitment Reddit "Reddit's r/cybersecurity; Commonwealth Cyber Initiative advertisement; recommendations from interviewees" 1 ranking Amazon "Alexa/Tranco top 10,000" 1 subject Reddit "Reddit User Submissions" 1 ranking Amazon "Alexa 1M, Umbrella 1M, and Majestic 1M" 1 subject WeChat/Weibo/QQ "WeChat and WeCom first-party miniapps" 1 subject WeChat/Weibo/QQ "QQ first-party miniapps" 1 subject WeChat/Weibo/QQ "WeChat third-party miniapps" 1 recruitment Amazon "Amazon and BestBuy" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook groups, pages, WhatsApp groups and direct messaging" 1 subject Reddit "Reddit.com" 1 subject Amazon "Amazon and Google rankings" 1 subject Apple App Store "four Chinese app stores" 1 recruitment Twitter/X|LinkedIn|Discord "LinkedIn, Upwork, Discord, Slack, Twitter" 1 ranking Amazon "Alexa Top 1M, Cisco Umbrella, Majestic Million, and the Tranco Research List" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp)|Discord "Twitter, Facebook, Discord, and the ethresear.ch online forum" 1 recruitment WeChat/Weibo/QQ "wenjuan.com, friends, colleagues, contacts, Chinese universities and technical colleges, QQ, WeChat, and Chinese online-game groups" 1 subject Amazon "Alexa skill marketplace" 1 recruitment Twitter/X|Reddit "Consumer Reports' tech-focused mailing list, subreddits, Twitter, Open Tech Fund and Internet Freedom Festival mailing lists" 1 subject Google (Play/Search/Ads) "Google Play, third-party websites (APKPure and 360 Store)" 1 subject Apple App Store "app store pages, device vendor websites, and app resources" 1 ranking Amazon "Alexa 1M Global Sites 2020" 1 subject Amazon|eBay "Amazon, Walmart, eBay, Best Buy, and Home Depot" 1 subject Google (Play/Search/Ads)|Apple App Store "Apple App Store and Google Play Store" 1 subject Amazon|eBay "Amazon, Walmart, and eBay" 1 recruitment Google (Play/Search/Ads)|Apple App Store "North America-regional App Store and Google Play store" 1 subject Apple App Store "Xiaomi App Store" 1 recruitment Amazon "Alexa Top 10K sites" 1 subject Google (Play/Search/Ads) "Google Play Store charts" 1 subject Apple App Store "iOS App Store category rankings" 1 recruitment Reddit "social media, mailing lists, Slack channels, HackerOne, BugCrowd, and Reddit" 1 recruitment Amazon "Alexa top 1M domains" 1 recruitment Reddit "Reddit forums and an email listserv" 1 subject Discord "Midjourney Discord dataset" 1 recruitment Amazon "Mechanical Turk (MTurk)" 1 recruitment Amazon "Amazon Mechanical Turk (Mturk)" 1 recruitment Apple App Store "Chrome Web Store, Firefox Browser Add-Ons, Mac App Store, and GitHub" 1 subject Apple App Store "official app stores [7] and open-source datasets [2]" 1 recruitment Twitter/X "Twitter API for Academic Research" 1 recruitment Twitter/X "Twitter account dataset derived from sampled tweets" 1 recruitment Amazon "Alexa Top Website list" 1 ranking Amazon "Alexa's Top 10 Sites" 1 subject Apple App Store "Android and iOS app stores" 1 subject YouTube "YouTube-VIS" 1 subject Amazon "Amazon websites in English: amazon.com, amazon.com.au, amazon.ca, amazon.in, amazon.sg, and amazon.co.uk" 1 subject Amazon "Amazon websites in English" 1 subject Meta (Facebook/Instagram/WhatsApp) "custom Facebook Groups dataset" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook leak and name-dataset" 1 subject Amazon "Amazon Cell Phone" 1 infrastructure Amazon "AWS cloud IP addresses" 1 subject Twitter/X "Twitter API V2" 1 ranking Amazon "Alexa Top 10K websites" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp)|Reddit|LinkedIn|Pinterest "custom website list: Google, Facebook, Dropbox, Twitter, Pinterest, LinkedIn, Yahoo, Reddit, and GitHub" 1 subject WeChat/Weibo/QQ "Tencent advertisement platform" 1 ranking Amazon "Alexa top 20k" 1 ranking Amazon "custom traffic-trace dataset derived from Alexa websites" 1 recruitment Twitter/X|Reddit "public websites, Reddit, Twitter, and personal networks" 1 subject Amazon "Amazon-Beauty" 1 subject Amazon "Amazon-Baby" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook Ad Library API" 1 recruitment Twitter/X "Hayawi et al. [34] COVID-19 vaccine-related Twitter dataset" 1 recruitment Twitter/X "custom keyword-filtered Twitter corpus" 1 recruitment Twitter/X "custom Twitter reply corpus" 1 subject Twitter/X "Twitter API 2.0 search endpoints" 1 subject Twitter/X "Twitter API 2.0 conversation IDs" 1 subject Apple App Store "Apple app store (U.S.)" 1 subject Apple App Store "Apple app store (U.S.), high-profile apps" 1 subject Google (Play/Search/Ads) "Google Play Store top-100 most popular games and apps" 1 subject Amazon "popular US stores, including Amazon.com" 1 subject Mastodon "Bluesky Relay" 1 subject Mastodon "Bluesky repositories and Firehose" 1 recruitment Google (Play/Search/Ads) "Google Play Store top app charts" 1 subject WeChat/Weibo/QQ "Tencent Myapp" 1 recruitment Discord "undergraduate junior operating systems class; senior- and MS-level application security class; informal student software chat group over Discord" 1 subject Meta (Facebook/Instagram/WhatsApp) "Meta Ad Library" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook pages manually identified for parties and leaders" 1 recruitment YouTube "YouTube Creator Research" 1 subject Google (Play/Search/Ads) "Google Play; AppBrain and AndroidRank" 1 recruitment Meta (Facebook/Instagram/WhatsApp)|Reddit|LinkedIn "LinkedIn and Facebook connections; regional Subreddits and Kijiji" 1 subject WeChat/Weibo/QQ "Tencent WeChat English Documentation" 1 recruitment Reddit "social media platforms (e.g., Reddit, Slack), email lists, and attached flyers around our institution" 1 recruitment Twitter/X "custom participant-controlled Twitter accounts" 1 recruitment Telegram "Telegram groups" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Prolific and Facebook advertisements" 1 ranking Amazon "Alexa Top-1K, Top-1K˜10K, Top-10K˜100K, Top-100K˜1M" 1 subject Twitter/X "Twitter, ScamSniffer, Etherscan, CryptoScamDB, Chainabuse" 1 subject WeChat/Weibo/QQ "WeChat mini-programs" 1 subject WeChat/Weibo/QQ "WeChat mini-programs flagged as potentially vulnerable" 1 subject WeChat/Weibo/QQ "WeChat mini-programs excluded from MiniCAT query results" 1 subject WeChat/Weibo/QQ "WeChat mini-programs with potential vulnerabilities" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook [32, 37]" 1 subject Google (Play/Search/Ads) "Google Play Store in the US" 1 subject Amazon "Amazon product reviews" 1 subject Spotify "Spotify" 1 recruitment Apple App Store "Xiaomi app store" 1 subject Twitter/X "Twitter Moderation Research Consortium" 1 recruitment YouTube "custom seed list of YouTube channels selected based on popularity" 1 subject Twitter/X "cryptocurrency derivatives exchange users linking Twitter handles" 1 subject YouTube "YouTube and Bilibili" 1 recruitment WeChat/Weibo/QQ|Apple App Store "Huawei, Vivo, and Tencent app stores" 1 subject Twitter/X "Twitter Application Programming Interface" 1 ranking Amazon "Alexa-top websites dataset" 1 subject Reddit "public dataset of 16K Reddit comments" 1 recruitment YouTube "YouTube Faces DB (YTF)" 1 subject Apple App Store "product websites, the Apple App Store, or mobile devices" 1 subject Apple App Store "Apple App Store XML site map" 1 subject Apple App Store "Apple App Store policy links" 1 recruitment Reddit "Reddit and I2P" 1 subject Flickr "Flickr-Faces-HQ (FFHQ) dataset" 1 recruitment Twitter/X|Reddit|LinkedIn|Discord "Public Subreddits and Discord servers; national associations; Twitter, LinkedIn, email; open-source game projects; Upwork" 1 subject Google (Play/Search/Ads) "Google searches" 1 recruitment LinkedIn "SAT Conference + LinkedIn, snowballing, and prior interview-study contacts" 1 subject Reddit "Reddit data set" 1 subject Telegram "public Telegram channels associated with KIWI FARMS" 1 subject Twitter/X "Twitter hashtag #dropkiwifarms" 1 recruitment Reddit "FAU lab webpage, private contacts, mailing lists, Reddit, and media advertisements" 1 recruitment Meta (Facebook/Instagram/WhatsApp)|Reddit|LinkedIn|Discord "VR-related Discord servers, sub-Reddits, LinkedIn, Facebook groups, and a local school" 1 subject Meta (Facebook/Instagram/WhatsApp) "Meta Ad Library API" 1 recruitment Reddit "Reddit subreddit" 1 subject YouTube "YouTube recommendation feed" 1 subject Google (Play/Search/Ads) "AndroZoo and Google Play Store" 1 subject Google (Play/Search/Ads) "Filtered AndroZoo/Google Play Store app set" 1 recruitment Twitter/X "Twitter and personal contacts" 1 ranking Amazon "Alexa top list" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "social media (e.g., Twitter and Facebook), then snowball sampling" 1 recruitment Apple App Store "top free app charts in both app stores" 1 recruitment Reddit "Grindr advertisements, Reddit advertisements, university posters and LGBTQ+-focused organizations; snowball sampling" 1 recruitment Reddit|Discord "websites and forums related to LLM jailbreaking, including FlowGPT, Jailbreak Chat, GitHub repositories, Reddit, and Discord" 1 recruitment Mastodon "joinmastodon.org and instances.social" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "professional network, local NGOs, second hand goods advertising mailing lists, poverty related Twitter hashtags, and Facebook groups" 1 ranking Amazon "Cisco Umbrella, Majestic Million, Tranco, SecRank, Alexa Top 1 Million" 1 infrastructure Google (Play/Search/Ads) "CDN market share statistics [12] and a Google search" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook advertising campaign" 1 subject Amazon "Amazon's API" 1 infrastructure Amazon "Ubuntu-based Amazon EC2 instances" 1 recruitment Twitter/X|Telegram|Discord "Twitter, Telegram, Discord, and word-of-mouth" 1 recruitment Meta (Facebook/Instagram/WhatsApp)|Reddit|Discord "VR-specific Discord servers, subreddits, Facebook groups" 1 recruitment Reddit|LinkedIn "VR-specific LinkedIn groups, subreddits" 1 subject WeChat/Weibo/QQ "various app markets and WeChat mini-programs" 1 ranking Amazon "Alexa top-50 websites" 1 ranking Amazon "D2 and Alexa Ranking" 1 recruitment Reddit "Reddit, online classifieds at Indiana University, and physical locations in/around Bloomington, Indiana" 1 subject Apple App Store "App Store top-popular list" 1 subject Amazon "Amazon.nl product pages" 1 ranking Amazon "Alexa top 5,000" 1 ranking Amazon "Alexa rank from 100k to 105k" 1 ranking Amazon "DynaPD and Alexa Top 5,000 to 15,000" 1 subject Google (Play/Search/Ads) "Google Play store based on the rank of APKPure" 1 subject Discord "Discord" 1 recruitment Google (Play/Search/Ads) "Avast fleeceware reports on Google Play" 1 subject LinkedIn "000Webhost, LinkedIn, Yahoo, RedMart, ClixSense, LiveAuctioneers, Tianya, 126, Dodonew, Taobao, and CSDN" 1 recruitment Google (Play/Search/Ads) "Google Play and 360 App Assistant top download lists" 1 infrastructure Amazon "AWS Spot Price History" 1 infrastructure Amazon "AWS pricing history API" 1 recruitment LinkedIn "organizations and conferences associated with medical device security; LinkedIn; personal contacts" 1 subject Google (Play/Search/Ads) "Google search engine and crowd-knowledge platforms" 1 falsepos Google (Play/Search/Ads) "AndroZoo (metadata) and Google Play Store" 1 subject Reddit "Reddit public URLs from a continuous Internet-wide crawl" 1 subject Reddit "43 manually selected Reddit subreddits" 1 subject Reddit "Reddit posts identified as IBSA help-seeking" 1 subject Reddit "Top three upvoted Reddit threads per sampled post" 1 subject Twitter/X "DeFiHackLabs, Twitter, SmartBugs Curated, Code4rena, Sherlock, and Ethereum Commonwealth" 1 subject Twitter/X "Global Reactions to COVID-19 on Twitter" 1 subject Twitter/X "Global Reactions to COVID-19 on Twitter, India sample" 1 ranking Amazon "Alexa Top 50,000" 1 subject Reddit "Pushshift API" 1 recruitment Twitter/X "personal and professional networks; then-Twitter; GitHub; S&P groups on Slack" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook survey and de-identified platform log data" 1 ranking Amazon "Alexa top 500 and top 10,000" 1 ranking Amazon "Alexa Top 100 Most Popular Websites" 1 subject Meta (Facebook/Instagram/WhatsApp) "Instagram interaction network" 1 subject Amazon "Alexa skill marketplaces" 1 subject Amazon "privacy-policy pairs across Alexa marketplaces" 1 subject Meta (Facebook/Instagram/WhatsApp) "top 10 messenger and social media apps in 2023" 1 subject Twitch "Twitch live streams" 1 infrastructure Amazon "eight commercial VPN providers and EC2 cloud instances" 1 subject Telegram "IT Army of Ukraine Telegram channel" 1 ranking Amazon "Alexa Top 200 websites" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook group directory" 1 recruitment LinkedIn "LinkedIn member directory" 1 recruitment Amazon "custom online study via Amazon Mechanical Turk" 1 recruitment Amazon "wtikay.com's set of 7012 commonly visited URLs (derived from the Alexa top 5000 sites list)" 1 ranking Amazon "Alexa top 10,000 global websites" 1 ranking Amazon "Alexa U.S. top 500" 1 subject eBay "Authorize, Digg, eBay, Microsoft, Recaptcha, and Yahoo commercial CAPTCHA schemes" 1 recruitment Apple App Store "SmartThings app store" 1 subject Amazon "custom Amazon search for “smart home devices”" 1 subject Google (Play/Search/Ads) "Google Play Store dataset from related work [79]" 1 recruitment WeChat/Weibo/QQ "WeChat public accounts, WeChat groups, and Xiaohongshu" 1 recruitment Reddit|LinkedIn "LinkedIn, Reddit, gCaptain, and personal connections/snowballing" 1 infrastructure Amazon "Google phone farm, Google and AWS cloud, a local lab" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook codebase" 1 subject Reddit "PushShift and ArcticShift" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook matrimony groups" 1 recruitment LinkedIn "LinkedIn, emailing groups serving power grid administrators, and personal social networks" 1 recruitment Reddit "Reddit keyword searches across selected subreddits" 1 subject YouTube "YouTube trending lists" 1 subject Twitter/X "Twitter V2 Archive Search endpoint" 1 subject Telegram "Telegram channels" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "academic mailing lists, university community networks, Facebook/WhatsApp groups with parents, and word-of-mouth" 1 subject Google (Play/Search/Ads)|Apple App Store "popular industrial PMs identified through Chrome Web Store, Google Play Store, Firefox Add-ons, Edge Add-ons, Apple's App Store, recommendation sites, and GitHub" 1 recruitment TikTok|WeChat/Weibo/QQ "WeChat, QQ, Xiaohongshu, Sina Weibo, and Douyin recruitment" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook group exclusively tailored to Pakistani women residing in the United States" 1 subject Meta (Facebook/Instagram/WhatsApp)|Discord|Snapchat "six selected online services: Apple iCloud, Google, Facebook, Instagram, Snapchat, and Discord" 1 recruitment Twitter/X|LinkedIn "developer forums, LinkedIn and Twitter, and Upwork" 1 subject Google (Play/Search/Ads) "Google Play U.S. region via AppBrain" 1 subject WeChat/Weibo/QQ|Apple App Store "Tencent App Store" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Prolific and Facebook group focused on CI users" 1 recruitment Telegram|Discord "X, Discord, and Telegram, and the research team's personal contacts" 1 recruitment Reddit "the ranking of the top 1000 subreddits provided by Reddit" 1 recruitment Reddit "these subreddits" 1 subject eBay "eBay API" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook Marketplace" 1 subject eBay "custom image sample from processed eBay images" 1 ranking Amazon "Alexa Top 1M List generated in May 2022" 1 recruitment Meta (Facebook/Instagram/WhatsApp)|Reddit|Discord "VR-specific subreddits, Facebook groups, and Discord servers; snowball sampling" 1 recruitment Google (Play/Search/Ads) "public developer contact information on Google Play and social-media accounts" 1 subject YouTube "McGrady et al. [43] random YouTube video sample" 1 subject Apple App Store "Meta Quest app store" 1 infrastructure Amazon "AWS IP ranges intersected with ISI IP Hitlist" 1 subject Amazon "Amazon USB-hub search results" 1 ranking Amazon "Alexa Top Websites and Semrush" 1 subject Reddit "seven selected subreddits" 1 subject Reddit "Reddit dataset" 1 subject Google (Play/Search/Ads) "Google Play store top app lists" 1 recruitment TikTok "TikTok dataset [33]" 1 recruitment Google (Play/Search/Ads)|Apple App Store "Google Play and Apple App Store" 1 recruitment Mastodon "Bluesky historical searches" 1 subject YouTube "YouTube Kids app" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook Hateful Memes (FHM)" 1 recruitment Meta (Facebook/Instagram/WhatsApp)|LinkedIn "Facebook marketplace, [anonymized regional online marketplace], LinkedIn, and word-of-mouth" 1 subject Reddit "Pushshift Reddit API" 1 recruitment Discord "local Discord server" 1 subject WeChat/Weibo/QQ "Weibo-COV" 1 subject WeChat/Weibo/QQ "Weibo-COV, keyword- and geolocation-filtered" 1 subject Twitter/X "publicly available data consisting of 1.4 billion tweets related to the COVID-19 pandemic" 1 subject Meta (Facebook/Instagram/WhatsApp) "SNAP repository Facebook dataset" 1 subject Meta (Facebook/Instagram/WhatsApp)|YouTube|Telegram "78 keywords across X, Instagram, Facebook, Telegram, and YouTube" 1 subject Reddit "all Reddit submissions" 1 subject Reddit "Reddit climate change dataset" 1 subject Reddit "Know Your Meme website and subreddit Bad Memes" 1 subject Google (Play/Search/Ads) "Google Play and development documentation" 1 subject WeChat/Weibo/QQ "WeChat and Baidu mini-apps with category information" 1 subject WeChat/Weibo/QQ "mini-apps using the WeChat realtime log API" 1 subject LinkedIn "Rockyou, LinkedIn, Mail.ru, 000webhost, Taobao, Gmail, Ashley Madison, Libero" 1 subject Yelp "Google PoJ104 and Yelp" 1 infrastructure Amazon "AWS Serverless Application Repository" 1 subject Amazon "Amazon Reviews" 1 recruitment LinkedIn "Maimai, LinkedIn, industry connections, and snowball sampling" 1 recruitment Apple App Store "Meta Quest App Store" 1 subject Meta (Facebook/Instagram/WhatsApp) "2021 Facebook data leak" 1 subject Meta (Facebook/Instagram/WhatsApp) "custom collected WhatsApp profile pictures" 1 subject Google (Play/Search/Ads) "Google Ads Keyword Planner API" 1 infrastructure Amazon "Amazon S3 bucket" 1 subject Apple App Store "macOS App Store" 1 recruitment Apple App Store "mainstream app stores and CoinCarp" 1 recruitment WeChat/Weibo/QQ "Weibo and Xiaohongshu native search features" 1 subject Meta (Facebook/Instagram/WhatsApp) "Ego-Facebook" 1 subject Twitter/X "Ego-Twitter" 1 recruitment Amazon "Amazon's Mechanical Turk platform" 1 infrastructure Amazon "AWS EC2 regions outside China" 1 ranking Amazon "combined Alexa Top 1M, Tranco 1M, and Cisco Umbrella 1M history" 1 subject Amazon|Reddit "WikiText-103, XSum, Amazon Reviews, CC-News, and Reddit" 1 subject Twitter/X|LinkedIn "LinkedIn, 000Webhost, Twitter, RedMart, and MathWay" 1 recruitment Amazon "Sidewalk-related publications from Amazon, tech news outlets, and manufacturers" 1 recruitment LinkedIn "direct emails obtained from publicly available sources, direct messages on LinkedIn, professional networks, and snowball sampling" 1 recruitment Meta (Facebook/Instagram/WhatsApp)|Reddit "selected Reddit subreddits and public Instagram profiles" 1 recruitment YouTube "Mozilla's \"YouTube Regrets\" project" 1 recruitment Amazon|YouTube|Netflix "YouTube, Amazon Prime Video, and Netflix" 1 recruitment Reddit "r/Drugs related subreddits" 1 subject Reddit "RedditLeak" 1 subject Reddit "PersonalReddit" 1 infrastructure Amazon "Ubuntu Generic, Ubuntu AWS, Fedora Core, and Fedora Enterprise Linux Next" 1 subject Twitter/X "Twitter dataset by Sawhney et al." 1 subject Telegram "Telegram search bots" 1 subject Telegram "Telegram" 1 subject Telegram "Telegram channels linked through bios, pinned posts, and message histories" 1 subject Telegram "Five Telegram query groups" 1 recruitment LinkedIn|Discord "social media, LinkedIn groups, Discord servers, university bulletin boards, and snowball sampling" 1 subject Google (Play/Search/Ads) "Google Play lists of popular apps in 49 app categories" 1 infrastructure Amazon "AWS C5 instance type" 1 ranking Amazon "Alexa Top 3k" 1 ranking Amazon "Alexa Top 1k" 1 subject Amazon "Amazon CD" 1 subject WeChat/Weibo/QQ "WeChat Accounts (4), Appraven Groups (2), Illicit Websites (17)" 1 subject WeChat/Weibo/QQ "RedNote (Xiaohongshu)" 1 subject Twitter/X "Twitter Archiving Project" 1 subject Meta (Facebook/Instagram/WhatsApp) "CrowdTangle API" 1 recruitment WeChat/Weibo/QQ "Tencent's official VTT service" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook's desktop website" 1 subject Twitter/X "Twitter URLs checked against five blacklists" 1 subject Twitter/X "non-spam URLs appearing on Twitter" 1 ranking Amazon "Alexa top 100,000 websites" 1 ranking Amazon "Alexa top 1,000 sites" 1 ranking Amazon "Alexa top site list" 1 subject Google (Play/Search/Ads) "Google Play Store (previous crawl of the market)" 1 subject Amazon "Google, Amazon, Microsoft Azure, and Alibaba Cloud application marketplaces" 1 recruitment Amazon "Amazon Mechanical Turk workers, friends, and colleagues" 1 recruitment Amazon "local VMs, Azure, and AWS Windows images" 1 subject Apple App Store "App Store top 100 free apps in the Netherlands" 1 recruitment Telegram|Discord "Discord and Telegram" 1 ranking Amazon "Alexa, Tranco, Cisco Umbrella, and Google's Chrome User Experience Report (CrUX) Top Lists" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "local WhatsApp groups in Kenya and WhatsApp status" 1 ranking Amazon "Alexa top 10 000" 1 recruitment Amazon "custom extracted email list from Amazon Alexa skill descriptions" 1 recruitment YouTube "previous unrelated study's 1% YouTube dataset" 1 recruitment YouTube "YouTube organic searches" 1 subject WeChat/Weibo/QQ|Apple App Store "WeChat miniapp store" 1 subject Amazon "custom collection of Amazon Music recordings" 1 subject Reddit "Piracy Megathread on Reddit" 1 recruitment Google (Play/Search/Ads)|Apple App Store "Google Play Store and Apple App Store" 1 recruitment Steam "Most played VR games list on Steam" 1 recruitment Steam "Steam app privacy policies" 1 recruitment Discord "university forums, CTF competition mail lists, and VDE Discords" 1 subject Meta (Facebook/Instagram/WhatsApp) "custom experiment population on Instagram" 1 subject Meta (Facebook/Instagram/WhatsApp) "custom experiment population on Facebook" 1 subject Meta (Facebook/Instagram/WhatsApp) "custom Case Study 2 experiment population on Instagram" 1 subject Meta (Facebook/Instagram/WhatsApp) "custom Case Study 3 experiment population on Facebook" 1 subject Meta (Facebook/Instagram/WhatsApp) "custom Case Study 5 experiment population on Instagram" 1 subject Netflix "Netflix and Prime Video" 1 ranking Amazon "Alexa Top 1M dataset" 1 subject Amazon "Amazon Prime Video, Max, and SVT Play" 1 ranking Amazon "Alexa top 10,000 websites list" 1 recruitment Reddit "Reddit communities r/VPS, r/agency, r/webhosting, r/Hosting" 1 recruitment Reddit "Reddit communities and manually reviewed company websites" 1 recruitment LinkedIn "professional networks, LinkedIn posts, medical professional development organizations, and snowball sampling" 1 recruitment Reddit "literature, Reddit, and Quora" 1 recruitment Google (Play/Search/Ads) "Google Play Store developer contact information" 1 subject Reddit|Telegram "Pushshift Telegram" 1 subject Meta (Facebook/Instagram/WhatsApp) "Facebook public groups via CrowdTangle" 1 subject Meta (Facebook/Instagram/WhatsApp)|WeChat/Weibo/QQ "WeChat Mini Game, Facebook Instant Games, and QuickGame" 1 subject Google (Play/Search/Ads) "OSV database; Google Search API results" 1 subject Google (Play/Search/Ads) "Google Ads" 1 recruitment Amazon "Alexa top 50K domains" 1 ranking Amazon "Alexa top 12K websites" 1 ranking Amazon "Alexa top 20K registration pages" 1 subject WeChat/Weibo/QQ "custom WeChat MP crawler" 1 subject Google (Play/Search/Ads) "Top Google Play dataset" 1 subject Google (Play/Search/Ads) "Top Google Play and F-Droid datasets" 1 subject Google (Play/Search/Ads) "Google APK scan / Google Play apps" 1 subject Google (Play/Search/Ads) "Google Play apps using com.umlaut.crowd SDK" 1 subject Twitter/X|Meta (Facebook/Instagram/WhatsApp)|WeChat/Weibo/QQ "custom seed list: Twitter, Facebook, and Weibo public user-posted URLs" 1 subject Twitter/X "Twitter Decahose" 1 recruitment Reddit "online military-related forums, specifically Reddit" 1 recruitment Reddit|Google (Play/Search/Ads) "custom MMMapp dataset assembled from Google Play and Reddit" 1 subject Google (Play/Search/Ads) "Google Play Top Free charts" 1 subject Google (Play/Search/Ads) "Google search results and GitHub repositories" 1 recruitment Netflix "Netflix Prize dataset" 1 subject Google (Play/Search/Ads) "Google Play Store historical most-installed list" 1 subject Google (Play/Search/Ads)|Apple App Store "Google Play, MyApp, and Apple App Store" 1 ranking Amazon "Alexa websites" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp) "Twitter, Facebook and WhatsApp" 1 recruitment Google (Play/Search/Ads) "Android's Google Play" 1 ranking Amazon "Alexa's top US list" 1 ranking Amazon "Alexa top 3000 sites" 1 ranking Amazon "Alexa top 1000 sites" 1 ranking Amazon "Alexa top 500K" 1 ranking Amazon "Alexa top 1K" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook Ads Manager" 1 recruitment Meta (Facebook/Instagram/WhatsApp) "Facebook population statistics derived from Dp" 1 recruitment Reddit "/r/Scams subreddit" 1 ranking Amazon "Alexa Top 1M Sites" 1 infrastructure Amazon "AWS S2N-TLS" 1 recruitment Google (Play/Search/Ads) "Goko Store, Android Wear Center, and the official Google Play app market" 1 recruitment Google (Play/Search/Ads) "Google Play store; AOL Query Log dataset" 1 subject Google (Play/Search/Ads)|Apple App Store "iOS App Store, Google Play Store, Chrome Web Store and Firefox Add-on Store; web search engine and curated lists" 1 subject Telegram "official Telegram clients" 1 subject Google (Play/Search/Ads) "Google Play Store reviews" 1 subject YouTube|Google (Play/Search/Ads) "10M dataset and YouTube data APIs" 1 ranking Amazon "Alexa top one million list" 1 ranking Amazon "Alexa Top 1K websites" 1 recruitment Twitter/X|Meta (Facebook/Instagram/WhatsApp)|LinkedIn "Twitter, LinkedIn, Slack channels, Whatsapp groups, vulnerability discovery organizations, and bug bounty-as-a-service companies" 1 ranking Amazon "Alexa Top Websites" 1 subject Apple App Store "HUAWEI and Google's app store"
Reading notes on that dump:
"Alexa"alone is 51 papers, all assignedranking. This single line is the difference between 176 and 39 Amazon papers."tiktoken"is the OpenAI tokenizer, assignedfalsepos. A substring match ontiktokfinds it."Amazon Reviews","WikiText-103, XSum, Amazon Reviews, CC-News, and Reddit"are assignedbenchmark: training corpora named after a platform. The paper trains on them; it does not measure the platform."Google, Amazon, and IBM text-to-speech APIs"ismlservice;"Google Firebase Test Lab and Amazon Device Farm"isinfrastructure.- Strings naming several platforms (
"Amazon, Walmart, eBay, Best Buy, and Home Depot") are tagged for each family they name, which is why the family counts do not sum to 897. - Known imperfections we did not fix, visible in the dump:
"Amazon private registry"is assignedsubjectand is probably a package registry;"AOSP, Amazon, Xiaomi and LG"is Amazon as a device vendor. These are the kind of residue the hand-audit prices, which is why the audit exists.
Fold 2: detection.phenomenon into ten families
detection.phenomenon is free text and agrees run-to-run on roughly 20% of exact strings, so this fold is published on the content page as a ranking, explicitly not a partition, with its residue stated in the table itself: 415 of 897 papers (46.3%) have detection tuples matching none of the ten families.
The residue is 1,893 distinct phenomenon strings across 1,920 tuples — i.e. almost every residue string occurs once. That distribution is itself the finding: the fold cannot be made into a partition without inventing categories. The full residue vocabulary, frequency-ordered:
- platforms_phenomenon_residue.txt
# residue: 415 papers, 1893 distinct phenomenon strings, 1920 tuples 3 false positives 3 SSL/TLS MITM vulnerability 3 tweet location prediction 2 Attack transferability 2 Automated hollow CAPTCHA solving 2 blacklist coverage 2 code-injection vulnerability 2 countermeasure bypass 2 cross-domain authorship attribution 2 Defense detection failure 2 false negatives 2 In- and out-degree distributions 2 Interaction-level membership inference 2 malware infection 2 network de-anonymization 2 radicalization-pathway reduction 2 runtime certificate pinning 2 Security and privacy themes 2 Sensitive-resource access 2 topic diversity 2 Training-data memorization 2 unintended URLs 2 URL shortening 2 visual-concept names 1 2020 election narrative mentions 1 3D skeleton recovery from IR shadows 1 A&T network requests 1 AAID co-transmission 1 AAID transmission before consent 1 AAID transmission without consent 1 Abandoned domains 1 ABR traffic side-channel leakage 1 Access duration 1 accessible NSXPC methods 1 Account growth and churn 1 Account hacking experiences 1 Account popularity 1 Account recovery experience 1 Achievement-playtime relationship 1 Actionable rationale snippets 1 Actionable tweets 1 activation duration 1 Active attacker-in-the-middle 1 Active property inference 1 Active-learning label selection 1 activity centers 1 Activity-connectivity association 1 Adaptive evasion by decoding changes 1 Additional privacy information leakage 1 administrator policy customization 1 Adoption willingness 1 Adversarial attack success 1 adversarial attack vulnerability 1 adversarial authorship attribution 1 Adversarial content exposure 1 Adversarial robustness under defenses 1 Adversarial synonym perturbation 1 Adversarial text attack success 1 Adversarial text utility preservation 1 adversarial training resilience 1 Adversarial-training resistance 1 Adversarial-training robustness 1 advice-position inconsistency 1 AES key-size classification 1 Affective polarization parameters 1 affiliate communities 1 age variation in broker coverage 1 agreement with human diffusion judgments 1 AI assistant usage and security practices 1 AI-generated content 1 AI-mediated product market shares 1 Alarm blocking 1 Alexa skill identification 1 Alexa skill-discovery ranking 1 Alexa transcription accuracy 1 algorithm scalability 1 Algorithm scalability 1 Algorithmic cluster stability 1 Algorithmic skin-tone bias 1 ALM maturity-rating classification 1 Alternative formula recovery 1 Alternative-market risk 1 Alzheimer's predisposition inference 1 Amazon client-ID typosquatting 1 Amazon wishlist monetization 1 Android app code coverage 1 Android app straw attacks 1 Android app traffic classification 1 Android app-virtualization engines 1 Android application analysis runtime 1 Android cryptographic API misuses 1 Android fragment use 1 Android IoT runtime-information gathering 1 Android malware 1 Android malware threat-intelligence extraction 1 Android network data flows 1 Android PhaLib prevalence 1 Android privacy leakage paths 1 Android text-input constraints 1 Android traffic imprints 1 Android vulnerabilities and bugs 1 Android-version-dependent support 1 AngularJS CSP bypasses 1 animated 3D model cloning 1 annotation burden 1 Anonymization resistance to de-anonymization 1 Anti-phishing crawler access 1 Anti-spyware detection 1 Anti-Theft bypass 1 Antivirus co-detection relationships 1 Antivirus detection 1 Antivirus detection coverage 1 antivirus evasion 1 anxiety symptom classification 1 API sampling and topical-density effects 1 app downloads 1 App identification coverage 1 app squatting 1 App vulnerabilities 1 App-category correlations 1 App-category popularity 1 App-category usage diversity 1 App-level security behaviors 1 App-side input sanitization 1 App-virtualization-based malware 1 apparently dead operations 1 AppID confusion 1 Application crashes 1 Application hiding 1 Application-specific radio inefficiency 1 Apps storing evidentiary data 1 apps with both vulnerabilities 1 argumentation stance 1 artificial channel engagement 1 aspect, opinion, and sentiment extraction 1 ASR mistranscription 1 Assortative mixing coefficient 1 AT commands 1 ATS domains 1 attachment recovery via deduplication 1 attack categories 1 attack completion time 1 Attack execution time 1 Attack-VC prevention effectiveness 1 Attacker accesses and account actions 1 Attacker response speed 1 Attorney influence on incident response 1 attribute inference for majors and employers 1 attribute inference from social links and behaviors 1 Audio and video RTP traffic 1 audio exfiltration 1 auditing burden 1 authority ranking 1 authority-score validation 1 authorization vulnerability candidates 1 Automated comment generation 1 automated scraping activity 1 automatic fake-edge detection 1 Automatic quality classification 1 Available bandwidth 1 Average video file size 1 AVI misidentification 1 Awareness of Off-Facebook Activity 1 Awareness of sensitive XR data 1 Awareness of XR attacks 1 Backend URL extraction 1 backup ciphertext-length injection attacks 1 Badly generated cryptographic keys 1 Baidu master-key leakage 1 Ban-evasion tactics 1 behavior exploration coverage 1 behavioral homophily 1 behavioral personas 1 behavioral profile pollution 1 Below-market liquidation prices 1 Benchmark graph classification 1 benefit of additional mobility data 1 benign campaign effectiveness 1 benign indicators 1 binary obfuscation 1 binomial ordering prediction 1 binomial word ordering 1 black-box Titan attack 1 black-word discovery 1 blacklisted unintended domains 1 blind message attacks 1 blind multi-message attacks 1 Blind-user timeline accessibility 1 Blocking used for privacy 1 Bluesky integration synchronization 1 Bluetooth skimmer detectability 1 booter domain resurrection 1 BPPM dependence and asymptotic independence 1 brandless phishing 1 Broadcast plaintext recovery 1 Broadcast-message impersonation 1 Broken published Alexa kids skills 1 browser Safe Browsing warnings 1 BSSID geolocation 1 bugdoors 1 built-in QR code readers 1 Business versus social review language 1 Buyer-location inference 1 campaign aggregation 1 CAN bus command semantics 1 CAN bus command syntactics 1 candidate app detection 1 candidate sentiment trends 1 candidate-pair blocking 1 capability confusion 1 CAPTCHA labeling reliability 1 Car-model information 1 carbon-footprint estimation error 1 Carrier-aggregation traffic loss 1 category-specific inaccuracy 1 causal arguments 1 CBC padding oracle 1 Cellular-network robustness 1 Celsius leak deanonymization 1 Centrality of cheaters 1 Certificate masquerading 1 Certificate pinning 1 Certificate pinning and expiry 1 Certificate-search incompleteness 1 Certificate-search processing delay 1 Certification of policy-violating Alexa skills 1 Certification of policy-violating Google actions 1 Chameleon detection on known apps 1 Chameleon-page group infiltration 1 Changing LTE identifiers 1 Channel longevity 1 Channel membership growth 1 channel popularity 1 channel sojourn time 1 Cheater gameplay interactions 1 Cheater homophily 1 Cheating propagation 1 check-in sequences 1 Check-in spatial concentration 1 check-in utility improvement 1 Checkworthy claim classification 1 Checkworthy CURE claims 1 CID exposure 1 cipher classification 1 Circumvention in popular sites 1 Circumvention surviving ACVL 1 Citation contamination 1 City-scale Grindr scanning 1 claim truth accuracy 1 Claim-type prediction 1 Classifier A&T detection 1 Cleartext login pages 1 Client response injection 1 Client- versus server-side validation 1 client-side token leakage 1 Climate discourse topics 1 Climate stance 1 Climate temperature-history reconstruction 1 Climate-activism activation 1 Climate-change awareness 1 CLIP encoder membership inference 1 cloaked content categories 1 Cloud processing and third parties 1 Cloud-device registration vulnerabilities 1 Cluster stability over time 1 Clustering evolution 1 CMRF attack case studies 1 CMRF vulnerability 1 code snippet containment 1 code vetting evasion 1 collective emotional resonance 1 Collusion-network membership 1 comment intent 1 commercial audio CAPTCHA solving 1 Commonsense QA usefulness 1 commonsense reasoning quality 1 communication overhead 1 communicative intent 1 Community characteristics associated with exploration 1 community discussion topics 1 community engagement 1 community mapping 1 Community participation roles 1 Community rule restrictions 1 community success dimensions 1 Community-group exploration 1 Community-level privacy risk 1 Community-level social dimensions 1 Community-note treatment timing 1 company authorization responses 1 competitor preference 1 compiler-induced backdoor 1 compiler-induced numerical deviation 1 Component-control semantic recovery 1 Concealing drug use 1 conditionally triggered UIs 1 confidence-based selective attacks 1 confidence-score calibration 1 confirmed vulnerabilities 1 confused deputy vulnerabilities 1 Connected-component structure 1 console malware image substitution 1 constant CBC initialization vectors 1 constant symmetric encryption keys 1 Constraint extraction errors 1 Consumer attitudes 1 contact and message metadata inference 1 contact-discovery enumeration 1 container-image vulnerabilities 1 containment estimation 1 content amplification 1 Content manipulation 1 content pollution 1 content vetting evasion 1 content-agnostic detection 1 content-based sensitive-place inference 1 Content-category distribution 1 Contested WhatsApp evidence 1 contextual privacy leakage 1 Continental snow cover 1 continued listening after stop 1 Continued user participation 1 contraband concealment by masking 1 contraband concealment by positioning 1 control-script and content-provider infrastructure 1 control-script API usage 1 control-team malware classification 1 coordinated malicious wall posts 1 copied Stack Overflow snippets in Android apps 1 coping-story classification accuracy 1 coping-story Twitter posts 1 COPPA-related privacy leakage 1 copyright-detector evasion 1 copyright-evasion techniques 1 corpus similarity 1 Correlation between antivirus engines 1 counter-type anomalous interactions 1 Countermeasure effectiveness 1 country-wide emotional resonance 1 county-level coverage variation 1 Coverage instrumentation compatibility 1 Covert traffic detection 1 CovertCast detectability 1 COVID-19 issue relevance 1 COVID-related topics 1 crashes in native libraries 1 CreepRank effectiveness 1 creepware apps 1 creepware categories 1 creepware ecosystem 1 creepware over time 1 criminal supporters 1 criminal traces on Reddit 1 criminal-account inference 1 criminal-account relationship network 1 critical-vulnerability prioritization 1 cross-booter navigation 1 Cross-chain warning severity 1 cross-cluster coordination 1 cross-device transferability 1 Cross-domain user reconciliation 1 cross-market attribution 1 cross-messenger registration overlap 1 cross-miniapp communication 1 cross-miniapp redirection relationships 1 cross-modal adversarial illusions 1 cross-network reliability 1 cross-origin vulnerabilities 1 cross-platform coordination 1 cross-platform domain typosquatting 1 cross-platform harmful behavior 1 cross-platform illicit promotion 1 Cross-platform linking 1 Cross-platform vulnerability similarity 1 Cross-query poisoning 1 Cross-session license replay 1 Cross-user leakage in iOS counterparts 1 Cross-user personal-data over-delivery 1 crowdturfing app promotion 1 crowdturfing marketplace activity 1 crowdturfing platforms 1 Crowdturfing target tweets 1 crowdturfing task types 1 crypto-detector missed misuse mutants 1 crypto-mining malware 1 Crypto-wallet user groups 1 Cryptocurrency discussion spread 1 Cryptocurrency promotion among verified accounts 1 Cryptographic and SSL/TLS API misuse 1 cryptographic API misuse 1 Cryptographic vulnerabilities in Android libraries 1 CRYSTAL typo detection 1 CSP deployment 1 CSP enforcement bugs 1 CSP policy bypassability 1 CSP security bypasses 1 CT public-log record growth 1 cue extraction volume 1 cue matching effectiveness 1 CURE claim presence 1 custom RAHs 1 customer activity distance decay 1 CVE-based privilege escalation 1 Cyber-insurance provider relationships 1 Cyberbullying window positions 1 daemon crashes 1 Daily YouTube delivery traffic 1 Daily YouTube video views 1 Dalvik protection overhead 1 dark jargon discovery 1 dark-jargon evolution 1 dark-jargon prevalence 1 Dashboard usability 1 Dashboard usefulness 1 data collection in Alexa skills 1 Data flows 1 Data leakage 1 Data linkability 1 Data Not Collected labels 1 Data savings 1 data sharing/storage 1 data-broker coverage 1 data-driven geo-fence 1 Data-type transmission 1 DCH and FACH tail effects 1 DCV-Hunter false positives 1 DDoS attack traffic 1 DDoS attack-volume change 1 Dead network sinks 1 deceptive link previews 1 dedicated malicious HICs 1 Deep-learning app adoption 1 Deep-learning application uses 1 Deep-learning model extraction 1 Deepfake detection robustness 1 deepfake engagement and reach 1 deepfake prevalence 1 defacement motives 1 defense effectiveness 1 Defense effectiveness 1 Degree-distribution stabilization 1 delayed message processing 1 delisted article themes 1 delisted URL rediscovery 1 Delisting decisions 1 delivery-notification timing side channel 1 Demographic differences in Alexa accuracy 1 Demographic differences in attacker behavior 1 Deniability consideration in court 1 Dense communication clusters 1 dense-type anomalous interactions 1 deployed MFA methods 1 depression expressions 1 depression severity levels 1 depressive symptom classification 1 Description frequency among human authors 1 description-instruction inconsistency 1 description-mismatched privacy requests 1 Detected misconfiguration errors 1 detection precision 1 detection-method agreement 1 developer account polymorphism 1 Developer IPS support 1 Developer responses to findings 1 Device impersonation 1 Device serial-number enumeration 1 Device vulnerabilities 1 device-family similarity 1 Device-ID collection 1 Device-ID sharing 1 Devices sold as new despite prior use 1 Differential Context Vulnerabilities 1 Digital adversarial attacks against commercial speech APIs 1 Direct device communication 1 Direct MIME exfiltration 1 Disaster-related Twitter activity 1 Discord flow behavior 1 Discriminative-attribute coverage 1 Discussion topics in tweets and replies 1 Distribution shift 1 Distribution vectors 1 DNN speech synthesis fooling speaker recognition 1 documentation-experience mismatch 1 documented MFA recovery procedures 1 domain aliases 1 domain and logo variants 1 domain cloaking 1 domain credibility 1 domain grouping effectiveness 1 domain name confusion 1 Dominant retweet applications 1 download-source malware distribution 1 DP GCN resistance to edge re-identification 1 Driving-route inference 1 DroidBench privacy leaks 1 Drug-photo prohibitions 1 dummy-account evolution 1 dummy-segment indistinguishability 1 Duplicate devices 1 duration-based sensitive-place inference 1 dynamic code loading 1 Dynamic file paths 1 Dynamic graph unlearning effectiveness 1 Dynamic graph unlearning efficiency 1 dynamic harmful actions 1 dynamic model extraction 1 Dynamic property occurrence 1 Dynamic-versus-static detection differences 1 early fake-account detection 1 Early-exit routing 1 early-stopping privacy–utility trade-off 1 ECB-mode use 1 edge re-identification 1 Edge-level privacy risk 1 EdX student reidentification 1 Effect of post location 1 Effect of post type 1 Effective anonymity below five 1 email-mediated MFA recovery 1 email-to-phone-number inference 1 email-token access 1 email–socware keyword overlap 1 embedded contacts 1 embedded versus arm's-length relationships 1 embedding separability under data loss 1 emoji skin-tone inference on Twitter users 1 Emotional change-points 1 Emotional group switching 1 Emotional persistence 1 en-masse visitor de-anonymization 1 Encrypted IoT traffic behavior inference 1 Encrypted model extraction 1 Encrypted or downloaded plugins 1 encrypted video identification 1 end-to-end service delay 1 End-to-end watermark embedding 1 Endorsement-tag effects 1 Engagement associations 1 Engagement by sentiment and topic 1 Engagement robustness 1 ENS integration synchronization 1 ensemble detection 1 environmental robustness of surveillance 1 European regional population estimation 1 evasion tactics 1 evasive miniapp malware 1 Evidence-file identification 1 Evidentiary files and data types 1 Executable injected mutants 1 Experienced harms and attacks 1 experienced legal threats 1 expert versus non-expert agreement 1 explicit and implicit PII 1 exploitable content-provider access 1 Exploitable crypto vulnerabilities 1 exploitable malicious behavior 1 Exploitable unsafe communication cases 1 Exploration preference across groups 1 Exploratory listening 1 Exploratory prompt behavior 1 Exported component protection 1 exposed content-provider candidates 1 Exposure to inappropriate content 1 Extended illicit listings 1 external resource loading 1 External-image loading 1 External-storage evidence 1 Extraterritorial requests 1 Facebook audience-statistic rounding 1 Facebook Connect login success 1 Facebook demographic undercounting 1 Facebook estimate stability 1 Facebook gifting application activity 1 Facebook location profiling 1 Facebook municipality coverage 1 Facebook photo privacy leakage 1 Facebook post-clicking decisions 1 Facebook security behaviors 1 Facebook suspicious-login incident response 1 Facebook-hosted socware 1 Facebook-leak account persistence 1 Faces in profile pictures 1 Facet and DeltaShaper detectability 1 Faithful attention 1 fake engagement accounts 1 fake social engagement 1 fake-account detection 1 fake-account detection in deployment 1 fake-account prevalence robustness 1 fake-edge detection 1 fake-update detectability 1 False app identification 1 False discoveries and statistical power 1 False negatives 1 False positives 1 False positives in User-ID checks 1 false positives on unknown traffic 1 false positives under network jitter 1 false-negative clone detection 1 False-positive alerts 1 false-positive clone detection 1 false-positive control in A/A tests 1 false-positive detection 1 False-positive snow photos 1 False-positive threat alerts 1 false-positive vulnerability flags 1 Fauxtography detection 1 Fauxtography prevalence 1 FCM use by secure-messaging apps 1 feature-dependent label noise 1 Features associated with surge pricing 1 Figurative disease-word mentions 1 Figurative false positives 1 figurative health mentions 1 Fine-grained multimodal QA coverage 1 fine-grained opinion extraction 1 Fine-grained privacy issues 1 first-sentence quotation 1 Five-label classification improvement 1 Five-level suicide-risk severity 1 fixed-key decryption 1 Fixed-randomness license manipulation 1 Flash XSS vulnerabilities 1 flow-context extraction 1 flow-policy inconsistencies 1 flow-semantic correlation 1 FM-radio delivery 1 Follower change 1 Follower dynamics after community notes 1 Follower-growth treatment effect 1 foreground-app inference 1 Foreign state-owned subsidiaries 1 forged SSL certificates 1 Formal incident-report production 1 foundation-model adversarial evasion 1 Four security-related behaviors in reviews 1 four-way health mention classification 1 frame polarization 1 frame-embedding protection 1 Friendship homophily 1 Friendship loss after cheating label 1 full VA-stack bypass 1 functional exploit development 1 Functional transformation discrepancies 1 future interaction timing 1 future popularity 1 fuzzing false positives 1 Fuzzing triggers 1 Fuzzing-trigger prevalence 1 Game co-dwelling context 1 Game co-purchase context 1 Gateway channels 1 gateway entities 1 gateway-site promotion 1 Gender and audience differences 1 generalization to customized generators 1 generic-IOC explosion 1 Geographic origins of accesses 1 Geographic profile coverage 1 Geographic propagation locality 1 Geographic surge areas 1 geographical location privacy 1 Geographical proximity 1 geographical topics and language patterns 1 Geographical variation in security and privacy mentions 1 geolocation inconsistency 1 Geolocation transmission 1 geospatial entity resolution 1 giant connected component 1 GitHub integration synchronization 1 Global clustering coefficient 1 global crowdturfing prevalence 1 Global edge traffic growth 1 GNN utility loss under infiltration 1 Google Bouncer evasion 1 Google Play app discovery 1 Google Play safeguard bypasses 1 Google+ component composition 1 Government-policy effect on key placement 1 GPU acceleration adoption 1 Graph classification on Tencent QQ groups 1 graph de-anonymization 1 Graph de-anonymization 1 graph recovery 1 graph training-data misuse 1 graph utility 1 Graph utility preservation 1 Graph-characteristic estimation accuracy 1 Grindr user positioning 1 ground-truth web traffic 1 Group metadata and activity 1 Group URL revocation 1 Group-chat births and deaths 1 Group-test significance and coverage 1 Guest data-sharing preferences 1 Guest smart-device preferences 1 Hack Forums discussion 1 Hacker mistakes and technical issues 1 Handle changes in Social Blade channels 1 Hard-coded encryption keys 1 hard-news filtering 1 Hashtag cascade diffusion 1 Hashtag obfuscation effectiveness 1 Hashtag-based fine-grained location inference 1 Headless/API choice biases 1 Health-mention classification 1 Heavy-tailed behavior distributions 1 Help-giving support types 1 Help-seeking state 1 heterogeneous treatment effects 1 Heuristic versus taint-based detection 1 hidden crowdturfing UIs 1 Hidden-face identification 1 High-entropy memorization 1 High-level privacy themes 1 High-school student profiling 1 high-severity vulnerabilities 1 Hindsight evaluation errors 1 Hint parsing coverage 1 historical GPS metadata exposure 1 Historical mobility predicts future mobility 1 Historical proximity tracing 1 HITS bias amplification 1 home and workplace locations 1 Home-brewed address-bar weaknesses 1 homophily relationship 1 Host-segment differences 1 Hostile language differences 1 HTML-obfuscation robustness 1 HTML/CSS/URI blocking bypasses 1 HTML5 mobile-app code-injection vulnerability 1 HTTP exposure of sensitive data 1 HTTP request template coverage 1 Human comprehension 1 Human detection of hidden commands 1 Human detection of synthetic speech 1 Human intelligibility under jamming 1 Human mobility nowcasting 1 Human mobility under disasters 1 Human recognition of perturbations 1 Human recognition of physical adversarial audio 1 human speaker-identification evasion 1 human-in-the-loop acceptance 1 Human-labeling reduction 1 human-perceived music deviation 1 Human-written description quality 1 Humanitarian crisis-tweet classes 1 humanitarian tweet classification 1 Hybrid UI frameworks 1 hyperbolic health mentions 1 IBSA help-seeking posts 1 ICC computation cost 1 ICC specification precision 1 ICC vulnerabilities 1 ID-based endpoint stability 1 idea plagiarism 1 Identifiable-packet coverage 1 Identification of hidden faces 1 identity confusion vulnerabilities 1 Identity-induced divergence 1 IDLL campaign clusters 1 IFT learnability 1 Illicit drug local listings 1 Illicit drug storefront content 1 illicit Monero mining 1 illicit monetization exploits 1 illicit-image detection 1 illicit-promotion posts 1 illicit-promotion prevalence 1 Image annotation tags 1 Image content themes 1 image format and resolution properties 1 image optimization effects 1 image rationale extraction 1 Image search quality 1 image-based meme clusters 1 image-semantic extraction 1 imminent exploit emergence 1 implicit PII 1 Implicit URL propagation 1 Implicit-flow analysis overhead 1 Improper logout 1 inaccessible or non-exploitable targets 1 Inadvertent location privacy leakage 1 inaudible voice command injection 1 Income prediction 1 Inconsistent JavaScript execution 1 Incorrect consent-choice storage 1 incremental contact-discovery rate limiting 1 IND-CPA insecurity 1 Indirect traffic overflow 1 Individual app popularity 1 Individual app usage diversity 1 Individual shortened-URL clicks 1 infected source domains 1 infection persistence 1 Influence-operation participant strategies 1 Information transfer between Twitter users 1 Information-flow leak-path detection 1 Information-flow validation 1 information-flow-related malware 1 information-operation agents 1 Information-sharing practices 1 informative security users 1 Injection channels in vulnerable apps 1 Insecure broadcast channels 1 insecure copied snippets in Android apps 1 Insecure cryptographic code in search results 1 Insecure OpenZeppelin code 1 insecure QR code readers 1 insecure Stack Overflow snippets 1 Insecure UIP transmission 1 Instagram social activism 1 Insurer access to forensic reports 1 Insurer and law-firm market concentration 1 Intended privacy-protective behavior 1 intent causes 1 Intent key-value data 1 Intent-handler code coverage 1 Intention-related subscriptions and listening 1 Intentionally loosened checks 1 Inter-component data flows 1 Inter-rater coding reliability 1 intergroup interaction 1 internal codebase secret leakage 1 Internet scanning activity 1 Interpreted commands 1 Interview themes 1 intra-corpus similarity 1 investor long/short positions 1 investor margin size 1 invocation-name violations 1 IOC discovery 1 iOS API usage 1 iOS Chameleon apps 1 iOS counterparts affected by spoofing 1 iOS PhaLib prevalence 1 iOS side-channel discovery 1 IoT companion-app identification 1 IoT device and app vulnerabilities 1 IoT device identification 1 IoT device vulnerabilities 1 IoT endpoint and protocol reconstruction 1 IoT operation inference 1 IoT security and privacy ratings versus sales 1 IP addresses per user 1 IP cloaking 1 IP-based cloaking 1 IPS-related reviews 1 IPS-related web resources 1 IPS-relevant apps 1 IPv6 prevalence among users and requests 1 IPv6 security-action effectiveness 1 IR shadow curtain penetration 1 IR shadow keypoint detection 1 issue polarization 1 issue topics 1 IT Army Telegram activity 1 Italian recipe-query search volume 1 Jamming robustness against enhancement 1 JavaScript backchannels 1 JNI memory safety 1 JPEG-resistant illusions 1 JSONP bypass exploitability 1 JSONP CSP bypasses 1 key and IV reuse 1 Key reuse 1 Key-function category combinations 1 Key-transparency perceptions and misconceptions 1 keystroke decryption by network eavesdroppers 1 Kin genome reconstruction 1 Knowledge diversity 1 Knowledge tuple correctness 1 Knowledge tuple elicitation 1 known activity-date deanonymization 1 Known exploit-chain rediscovery 1 known-token deanonymization 1 label-noise robustness 1 large network flows 1 Large-scale exploitation 1 larger-foundation-model defense resilience 1 Largest connected component evolution 1 latent community structure and burstiness 1 latent content topics 1 leader-follower emotional fluctuations 1 Leaked onion-domain lookups 1 Leaked-key attacks 1 Leave/Remain camp affiliation 1 legitimate-keyword usage 1 legitimate-user concentration 1 legitimate-user recognition 1 legitimate-user simulation coverage 1 lexical diffusion of ordinary language 1 Lexically similar impersonator handles 1 License expiration extension 1 Like-as-a-Service 1 Limited privacy-settings knowledge 1 link previews 1 link-preview fields and layouts 1 Link-stealing resilience 1 linkage attack effectiveness 1 Linked-account exposure 1 LinkedIn audience size 1 LinkedIn user uniqueness 1 LinkedIn-Wikipedia identity matches 1 Literature trends and knowledge gaps 1 LLM cue presence detection 1 LLM cue-type extraction 1 LLM false IOBs 1 Local-search query pollution 1 local-search scalability 1 local-verification vulnerability 1 localized memorization signals 1 Location changes 1 Location collection 1 Location-agnostic server selection 1 Location-based load-balancing effects 1 location-based triggers 1 lockstep behavior 1 logic bombs in benign applications 1 logic bombs in malicious applications 1 logical contradictions or narrowing definitions 1 logical privacy-policy contradictions 1 Long-term app usage evolution 1 Long-term departure association 1 Longitudinal posting activity 1 Longitudinal throttling variation 1 Longitudinal vulnerability evolution 1 Longitudinal vulnerable-component adoption 1 Loop-stable-period leakage 1 loosely synchronized malicious-account activity 1 Low clustering in activity graphs 1 low PBE iteration counts 1 Lower social rewards for CMV participants 1 LTE video identification 1 MAC-address extraction from auction photographs 1 MAC-address OCR validation 1 Mainstream CA coverage 1 malicious accounts 1 malicious accounts across five applications 1 malicious author domains 1 malicious destination prevalence 1 malicious dynamic behavior 1 malicious instructions 1 malicious package detection 1 malicious payload categories 1 malicious redirection prediction 1 malicious URL redirection paths 1 malicious URL validation 1 malicious-link countermeasures 1 malicious-user admission 1 malicious-user growth 1 malware in squatting apps 1 malware in trending-term results 1 malware packing 1 malware SSL interception 1 Malware TLS proxies 1 Malware-family detection 1 malware-preview handling 1 manual stress-category labels 1 Map-search pollution 1 Market movements around pumps 1 Mastodon security events 1 media exfiltration 1 Media-public temporal relationship 1 membership inference 1 Membership inference 1 membership inference against image encoders 1 membership inference under defenses 1 membership inference vulnerability 1 meme influence 1 meme propagation across communities 1 meme-variant relationships 1 message recovery via zlib compression 1 message reordering 1 Message-content leakage 1 messenger server infrastructure 1 Metadata leakage 1 Metadata predictors of return frequency 1 metric directionality 1 metric sensitivity 1 MFA recovery success 1 MFA sites 1 MFA-domain collusion 1 Migration terminology reframing 1 MIME multipart capacity 1 mimicry resistance 1 Mini-program popularity 1 MiniCPRF vulnerability 1 minimum posts for severity prediction 1 Minority representation in rankings 1 misactivating words 1 misactivation repeatability 1 misactivations by TV show 1 Misconceptions about wallet security 1 misconfigured content providers 1 Misconfigured Google Play manifests 1 Misconfigured pre-installed manifests 1 Missing one-time prekeys 1 Missing precertificates 1 Missing privacy policies 1 Missing product attributes 1 Missing zero-address checks 1 missing-hostname collisions 1 Mistake categories 1 Mistake resolution time costs 1 Mitigation quality 1 Mobile AES-GCM cost 1 mobile app category classification 1 mobile browser security-mechanism support 1 Mobile deep-learning framework adoption 1 Mobile handle truncation 1 mobile-app privacy risk categories 1 Mobile-browser UI vulnerabilities 1 mobile-phone hash reversal 1 Mobility similarity and new friendships 1 Model answer error types 1 Model execution efficiency 1 model extraction false positives 1 model extraction fidelity 1 model interface inference 1 model memorization and exposure 1 model prediction error 1 Model protection 1 model protection techniques 1 model quantization 1 model recall for available matches 1 Model trajectory agreement 1 model utility after unlearning 1 Model-averaging property leakage 1 Model-selection heterogeneity 1 Monero mining campaigns 1 Monero share of circulation 1 Monitor log coverage 1 Moral-emotion classification 1 Moral-emotion prevalence 1 motivations and attitudes 1 MQTT endpoint reachability 1 Multi-device wallet adoption preference 1 Multi-frame diagnostic traffic 1 Multi-party property leakage 1 multi-source prompt-injection success 1 Multiplayer playtime 1 multiple-phone-number inference failure 1 mutation versus base-case detection 1 N-day backend vulnerabilities 1 NASDAQ trading-volume history reconstruction 1 natural compiler-induced triggers 1 negativity bias 1 Negligent certificate validation 1 Negotiation timing preference 1 Neighbourhood variation 1 NetCam home-occupancy inference 1 network activity 1 Network and identity effects 1 network connection classification 1 network data flows 1 network encryption protocol vulnerabilities 1 Network exposure 1 Network round-trip time 1 Network traffic overhead 1 Network-fuzzer vulnerabilities 1 network-to-policy inconsistency 1 Never-expiring license generation 1 new enforcement-action effectiveness 1 New vulnerabilities 1 News sentiment shift 1 NFL score timeline reconstruction 1 NFT drainer accounts 1 NFT drainer detection 1 NFT transaction behavior 1 no-verification vulnerability 1 node attribute inference 1 node label inference 1 node link inference 1 node training membership 1 Node-classification utility 1 Non-deterministic network traffic 1 Non-gazetteer location revealing words 1 Non-injective data transformations 1 Non-TLS sensitive transmissions 1 non-uniform ATM UN distributions 1 Nonfunctional recovery codes 1 Nonzero Google Trends query estimates 1 NSC adoption 1 NSC security downgrades 1 NSXPC attack surface 1 OAuth access-token leakage susceptibility 1 OBD-II formula recovery 1 Obfuscated and encrypted privacy leaks 1 obfuscated-secret detection 1 obfuscation robustness 1 off-chain cue prevalence 1 Off-store spyware 1 official UPI security advice categories 1 on-device deep-learning models 1 on-device ML adoption 1 On-device PendingIntent exposure 1 One-way delay 1 online item categories 1 Online versus physical exploration intention 1 online-offline identity linkage 1 OnlyFans creator profiles 1 open-world app inference 1 OpenPGP exfiltration channels 1 OpenPGP starting-sequence frequency 1 Operating-system inference 1 Organic interaction after pod use 1 organizer design decision-making 1 Orthogonal exploration depth 1 OSS reuse in Android apps 1 OSS version identification 1 Outdated proxy software 1 Outgoing network requests 1 Outgoing reputation manipulation 1 over-telephony countermeasure bypass 1 Overbroad personal-data collection 1 Overbroad-PDCP identification 1 overlap between promoted targets and observed attacks 1 Overrated Android applications 1 PACTOR detection accuracy 1 page availability and survival 1 page cloaking duration 1 PageRank bias reproduction 1 PageRank-detected malicious HICs 1 Pandora streaming tails 1 paraphrase plagiarism 1 Parent-child GAI safety perceptions 1 Parental mediation strategies 1 Parenting discussion topics 1 parked domains 1 partisan amplification in snippets 1 partisan polarity flipping 1 Partisan stance gap 1 passive content leaks 1 Passive property inference 1 passively leaked private information 1 Pay-Per-Install infrastructure 1 Payment-account campaign reuse 1 payment-processing concentration 1 PDCP extraction and regularization 1 pedagogical dimension implementation 1 PendingIntent exposure 1 Per-layer attack effects 1 Perceived online harms 1 Perceived WhatsApp security and trust 1 Perceived WiFi data collection 1 Perceived XR threat importance and practicality 1 perceived-noise detection 1 Persistence after downvotes 1 Persistent-identifier sharing 1 personal attribute inference 1 Personal-information leakage to FCM 1 Personally identifiable information 1 Perturbation indistinguishability 1 phishing 1 Phishing blocking coverage 1 phishing campaigns in the wild 1 phishing detection 1 phishing domain uptime 1 phishing kit deployment 1 phishing kit family prevalence 1 Phishing-link preview behavior 1 Phone-number exposure 1 Phoneme-based error prediction 1 Physical adversarial attacks against voice assistants 1 physical surveillance via poisoned hashes 1 PII deduplication 1 PII extractability 1 PII extraction 1 PII in pinned traffic 1 PII in plagiarized sequences 1 PII inference 1 PII reconstruction 1 PII transmission 1 PII-containing requests 1 pink-slime post classification 1 pinning circumvention 1 PIP categories 1 PIP survival 1 plagiarism occurrence frequency 1 plaintext location reporting 1 plaintext recovery 1 plastic-explosive concealment 1 platform request signatures 1 Platform-induced degradation 1 Platform-key installers 1 Player experience 1 Pod-affiliated Instagram posts 1 Pod-classifier generalization 1 POI-indicator association 1 Poisoned-entry persistence 1 PoliCheck consistency accuracy 1 Policy content omissions 1 policy contradictions 1 Policy coverage 1 policy statement extraction 1 Policy violations in published Alexa kids skills 1 Policy violations in published Google kids actions 1 Policy-app inconsistencies 1 policy-provenance mismatch 1 Policy-sensitive content after repurposing 1 Policy-sensitive content in sold channels 1 Polisis purpose extraction 1 political discussion episodes 1 Political leaning among verified accounts 1 political leaning differences 1 political orientation of visited news websites 1 politics-related memes 1 polluted-content side effects 1 pollution revenue increase 1 Position effects 1 Positional attack consistency 1 Positive sentiment in experience comments 1 Post engagement 1 Post subjectivity and discussion spread 1 Post-certification code-update vulnerability 1 Post-incident protective behavior 1 post-to-article segmentation patterns 1 potential device vulnerabilities 1 Potential GPL/AGPL violations 1 Potential IRSA victim population 1 Potential MiniCPRF attack paths 1 potential phishing domains 1 Potential victim population 1 Potential Xrce exposure 1 potentially harmful libraries 1 Potentially malicious domains 1 Potentially suicidal Redditors 1 potentially unauthorized 3D model cloning 1 poverty-associated coverage disparity 1 PPI distribution 1 pre-compilation trigger stealth 1 Pre-consent data processing 1 Pre-interaction PII transmission 1 pre-play card cloning 1 predictable community success 1 predictable EMV unpredictable numbers 1 prediction consistency 1 Preferential return and exploration 1 preferred emoji skin tone 1 Preferred server configuration 1 Prefix-search completeness 1 preview refresh behavior 1 Previously undetected A&T requests 1 previously undetected malicious accounts 1 previously unknown backdoors 1 previously unreported malicious packages 1 previously unseen samples 1 primary news frames 1 Privacy and security perceptions 1 Privacy and security risk perceptions 1 Privacy attitudes and inference beliefs 1 Privacy conceptualized as information control 1 Privacy concerns about audiovisual data collection 1 Privacy labels by app price 1 privacy leaks 1 Privacy leaks 1 Privacy leaks in Android apps 1 Privacy leaks missed by existing tools 1 Privacy negotiation intention 1 privacy side-channel image reconstruction 1 Privacy themes and issues 1 Privacy violations 1 Privacy violations in mobile apps 1 Privacy-attitude changes 1 privacy-conscious geotagging behavior 1 privacy-information requests 1 Privacy-label adoption 1 Privacy-label changes 1 Privacy-management themes 1 privacy-notice generation reliability 1 privacy-notice readability 1 Privacy-policy availability 1 privacy-policy completeness 1 Privacy-policy content 1 privacy-policy profiles 1 Privacy-policy reading interest 1 privacy-policy variability 1 privacy-policy/data-flow inconsistencies 1 Privacy-related reviews 1 privacy-sensitive data leakage 1 Privacy-setting changes 1 Privacy-threat detection 1 Private activity recognition 1 private-data leakage 1 private-information leakage 1 private-registry project-ID availability 1 privateId reuse 1 privilege escalation 1 Privilege-escalation chains 1 proactive web defacement 1 Probabilistic prediction miscalibration 1 problematic-content exposure 1 proctoring-evasion techniques 1 Product attribute mining 1 Product traffic and user-behavior changes 1 Product-attribute sensitivities 1 product-to-NAICS mapping accuracy 1 production false positives 1 profession, gender, age, and family-status prediction 1 Profile-language usage 1 Profile-picture availability 1 promotion campaigns 1 Prompt length 1 Prompt quality association 1 Prompt sessions 1 Prompt term usage and co-occurrence 1 Prompt-induced choice changes 1 Prompt-injection attack success 1 prompt-injection defense evasion 1 Prompt-text embedding gap 1 Proper security checks 1 Proportional load balancing 1 proprietary non-TLS encryption 1 Prospective-employer reidentification risk 1 PROSPER payment-impersonation attacks 1 protection-system blocking 1 Protest participation 1 Prototype processing overhead 1 proximity-based ordering 1 Proxy infrastructure 1 Psychological language differences 1 Public kin genomic privacy exposure 1 Public messaging-group discovery 1 Public user activity 1 public-registry typosquatting downloads 1 Pump-target prediction 1 PUP and malware prevalence 1 purpose classification 1 QAnon-related content 1 QR-code filter bypass 1 quantization robustness effect 1 Query efficiency 1 query-level privacy leakage 1 question-answer generation errors 1 racist memes 1 radiation safety-interlock bypass 1 radio content syndication 1 radio livestream content 1 random-delay countermeasure 1 Randomized HITS fairness 1 Rapid liquidation 1 rationale faithfulness 1 Rationale tokens 1 re-marketing profile pollution 1 Re-ranking reduction of insecure results 1 Readability differences 1 Real-world candidate URL inference 1 real-world cryptographic misuse 1 real-world IOB detection 1 Real-world quality degradation 1 Reasoning about policy statements 1 reCAPTCHA reputation 1 receiver country classification 1 receiver location classification 1 Reciprocal relationships 1 Recovery and relapse after AA enrollment 1 Recovery prediction at 90 days 1 Recovery prediction at one year 1 Recovery-code awareness 1 Recovery-code dialog interactions 1 Recovery-code storage strategies 1 recovery-procedure configuration 1 recurrent suspicious URLs 1 Reddit auditing discussions 1 Reddit discourse about AI-assisted development 1 Reddit discussion cascades 1 Reddit discussion categories 1 Reddit post categories 1 Reddit post interaction categories 1 Reddit recovery support problems 1 Reddit sentiment 1 Reddit stablecoin discussions 1 redirection-chain connectivity 1 regional misactivation differences 1 Regular versus irregular Skype stream classification 1 Related-video crawl coverage 1 Relay coverage and churn 1 religious polarization 1 remote ML model usage 1 Remote YouTube delivery 1 repeatable fake-profile reporting skill 1 repeatable invitation-acceptance skill 1 repeatable invitation-rejection skill 1 repeatedly detected accounts 1 replay attacks 1 Reply stance 1 reported broker-attribute accuracy 1 Reported feelings after exposure 1 Repurposing among sold channels 1 Reputation-manipulation activity 1 Request processing time 1 Requester concentration 1 requester gender distribution 1 requester identification 1 researcher legal concerns 1 Retrieval factual correctness 1 Return-community preference 1 Retweet and mention network structure 1 retweet-based message virality 1 retweet-network communities 1 Retweet-time distribution 1 Reused encryption key-IV pairs 1 Review-disclosed transformation methods 1 Reviewers’ evaluation practices 1 Routing-policy what-if impact 1 RRC inference accuracy 1 RRC promotion overhead 1 RSA key-exchange leakage 1 RTBF request volume 1 RTC application traffic 1 Rules encouraging politeness 1 runtime model downloading 1 Runtime monitoring overhead 1 Runtime-information-gathering attacks 1 S/MIME exfiltration channels 1 S&P-related Reddit posts 1 Safe Browsing blocking coverage 1 Safeguard threat detection 1 sandbox-induced provenance bias 1 Sarcasm in user-generated text 1 Scan and Secure spoofability 1 scanner radiation dose 1 screen recording by Appsee 1 screenshot exfiltration by TestFairy 1 Search and chat content 1 search-engine intervention effect 1 Search-ranking effect on functional correctness 1 Search-ranking effect on submitted-code security 1 search-ranking promotion 1 search-redirection attacks 1 search-result cloaking 1 search-result persistence 1 Search-result temporal variability 1 search-to-sale conversion 1 Secomp attack resistance 1 Secomp communication overhead 1 secret leakage across platforms 1 secret leakage in files 1 secret persistence across PyPI versions 1 Security and privacy concern themes 1 Security and privacy criteria in reviews 1 Security and privacy issues in reviews 1 Security event extraction 1 Security flaws in push-messaging SDKs 1 security impact of CMRF 1 security regressions 1 Security response actions 1 Security- and privacy-related Reddit discussions 1 security-event detection 1 security-measure prevalence 1 security-mechanism adoption windows 1 Security-related manifest misconfigurations 1 security-related Stack Overflow snippets 1 Seed-mapping error robustness 1 segment reordering 1 segment transmission delay 1 segregation of harmful content 1 Seller-buyer device movement 1 Seller-location inference 1 Semantic cache poisoning 1 Semantic false positives 1 semantic location privacy 1 semantic preservation 1 semantic privacy leakage 1 Semantic similarity crafting 1 semantic-background inference gain 1 semi-private entitlements 1 sensitive custom RAHs 1 sensitive data access 1 sensitive data flow exposures 1 Sensitive data over HTTP 1 Sensitive push-message leakage 1 Sensitive user inputs 1 Sensitive user-input identification 1 sensitive-data extraction 1 sensitive-data over-collection 1 Sensitive-data transmission 1 Sensitive-location device presence 1 sensitive-place visits 1 sensitive-word detection 1 Sentence-level membership inference 1 Sentiment 1 Sentiment bias 1 Sentiment toward Elon Musk 1 SEO synthetic-content contamination 1 SERP popularity bias 1 server location collection 1 Server session fixation 1 server-side message analysis 1 Service confusion 1 Session binding to devices 1 Session Juggler login success 1 Session-level cyberbullying 1 Seven IBSA types 1 SFC attack classification 1 SFC attack detection 1 shared encrypted models 1 Shortened-URL click candidates 1 Signal account registration 1 similar container-registry FQIDs 1 similar-claim clustering 1 Similarity of real-world and common degradation 1 Skew in posting activity 1 Skew in received reactions 1 Skill squatting 1 skimmer evasion 1 skimmer location distribution 1 skimmer-detection app behavior 1 small-world criminal network 1 Smart-device practices in Airbnbs 1 Smart-home NER 1 Smart-home power dynamics and privacy concerns 1 Smart-home security and privacy attitudes 1 smart-speaker misactivations 1 SMS expenditure 1 SMS-based triggers 1 SNI-triggered throttling 1 snippet extraction location 1 snippet versus metadata partisanship 1 Snow cover and snowfall 1 Social covariate–mobility association 1 Social dimensions in Twitter relationships 1 Social influence on game engagement 1 social interactivity 1 Social media used as data storage 1 Social uploader activity 1 social-butterfly follow-back behavior 1 Social-group label density 1 social-link inference from mobility profiles 1 social-link inference under obfuscation 1 Social-network chameleon susceptibility 1 social-promoter behavior 1 Sociodemographic-security behavior associations 1 Socioeconomic indicator prediction 1 Socket-channel vulnerabilities 1 socware detection accuracy 1 socware exposure 1 Source diversity collapse 1 source IP-address distribution 1 spatial emotional resonance 1 speaker diarization 1 speaker identification 1 speaker-verifier bypass 1 Spear skill squatting 1 Speech recognition under ultrasonic jamming 1 speech transcription quality 1 speech-content preservation 1 Spelling-check resistance 1 Sponsored-tag effects 1 squatting across app markets 1 squatting-app downloads 1 SSL dialogue accessibility and comprehension 1 SSL dialogue adherence 1 Stablecoin discussion topics 1 Stablecoin interaction scenarios 1 Stablecoin security-risk topics 1 Standardized versus customized CAN commands 1 STARTTLS certificate validation 1 STARTTLS command injection 1 STARTTLS security issues in email clients 1 STARTTLS-specific security issues 1 startup delay 1 State-owned access-market footprint 1 State-owned AS address-space footprint 1 State-owned Internet operators and ASNs 1 static 3D model cloning 1 static certificate-pinning indicators 1 static MAC addresses 1 static PBE salts 1 static SecureRandom seeds 1 Static versus dynamic behavior coverage 1 Static-analysis overhead 1 stealthy impersonation malware 1 stealthy malware detection 1 Stealthy plugin installation 1 Steam gamer behavior diversity 1 Steam user engagement distribution 1 Stolen-data categories 1 Stolen-data Telegram channels 1 Stranger access to tagged photos 1 straw data-storing vulnerabilities 1 streamer policy suggestions 1 Streisand effect 1 stress category 1 stress expressions 1 structured metadata prevalence 1 sub-app data leakage 1 Subject-field modifications 1 Subjective voice quality 1 submission-button adversarial robustness 1 success-measure association 1 Successful adblock circumvention 1 support of eight security mechanisms 1 Surge duration and update timing 1 Surge impact on vehicle transitions 1 Surge jitter 1 Surge multiplier prevalence 1 Surprising information discovery 1 surrogacy assumption 1 survey response coverage 1 Suspension events 1 Suspicious background apps 1 Suspicious followers 1 suspicious URLs 1 suspicious URLs in Twitter stream 1 Synchronized group activity 1 synchronized registration patterns 1 Synthetic graph classification 1 Synthetic graph inference risk 1 Synthetic graph linkability risk 1 Synthetic graph singling-out risk 1 synthetic image quality 1 Synthetic network reconstruction 1 synthetic noise resilience 1 Synthetic speech accepted by deployed SR systems 1 Synthetic update-history reconstruction 1 Synthetic-text detection generalization 1 synthetic-text fidelity 1 Synthetic-versus-empirical graph similarity 1 Systematic Alexa interpretation errors 1 tag spoofing vulnerability detection 1 tamper-evident seal conditions 1 Targeted domains 1 Targeted site categories 1 targeted-item promotion 1 task volume 1 TCF implementation prevalence 1 TCP/IP application tunneling 1 TDS infrastructure overlap 1 TDS malicious lifetime 1 Teenager GAI usage patterns 1 Telegram engagement 1 Telegram message languages 1 Telegram metadata exposure 1 Telegram pump-and-dump events 1 Telegram-hosted Instagram pod ecosystem 1 Temporal adversarial-audio detection 1 temporal and community variation 1 temporal campaign bursts 1 Temporal concern changes 1 temporal generalization 1 Temporal review-language evolution 1 Temporal vocabulary locality 1 Temporal-dependency attack detection 1 Ten social dimensions in conversations 1 text rationale extraction 1 text-image alignment 1 TFLite models in Android apps 1 Thematic-analysis themes 1 Theme dependability 1 Theme quality 1 Theme transferability 1 Threat-detection time consistency 1 threats to core values 1 Threshold versus multisig preference 1 Throttler network location 1 Throttler state timeout 1 Throttling asymmetry 1 TikTok privacy-management behaviors 1 Tile Mate 2024 static MAC 1 time-based triggers 1 time-to-inactivity and long-term engagement 1 Timer-setting tradeoffs 1 timing side channel 1 TLS certificate validation errors 1 TLS cipher-suite degradation 1 TLS cipher-suite diversity 1 TLS proxies by country 1 TLS proxy prevalence 1 TLS/SSL misconfiguration 1 TOC diversity and accuracy 1 TOCTOU confidentiality attack 1 Token-level corpus divergence 1 top-list FP coverage 1 topic changes 1 Topic differences 1 topic improvement 1 topic recall 1 topic-model distortion 1 Topical coverage gaps 1 topical homophily 1 Total number of YouTube videos 1 trade-area boundaries 1 traffic after TDS parking 1 Traffic by access type 1 Traffic distribution 1 Traffic Distribution Systems 1 Traffic graph snapshot stability 1 Traffic policing 1 traffic to registered domains 1 Traffic-duration effect 1 Traffic-volume asymmetry 1 Training-order effects 1 transcription utility 1 Transfer to DeepSpeech 1 Transfer to iFLYTEK ASR 1 transferable adversarial illusions 1 Transformation methods 1 Trending-hashtag promotion 1 Triangulation scan efficiency 1 trigger refinement 1 trinomial ordering 1 trinomial-binomial compatibility 1 Trust and profile authenticity 1 Trust in user-installed CAs 1 trusted IOB detection 1 Trusted-context human deception 1 Tweet and reply textual outliers 1 tweet embedding quality 1 Tweet emotional composition 1 Tweet entity linking 1 tweet spread 1 Tweet stance 1 Tweet topic composition 1 Twitter account suspension lag 1 Twitter activity 1 Twitter advice categories 1 Twitter chat sessions 1 Twitter content promotion 1 Twitter demographic attributes 1 Twitter group chats 1 Twitter image-description prevalence 1 Twitter request throttling 1 Twitter social actions 1 Twitter verification-status changes 1 Typos or phishing-like onion domains 1 Typos or phishing-like popular domains 1 UA-specific phishing-site blocking evasion 1 Uber vehicle supply and fulfilled demand 1 UDP amplification DDoS attacks 1 UDS/KWP 2000 formula recovery 1 UDS/KWP formula prevalence in apps 1 UI interference elements 1 UI text and sensor-value extraction 1 Ultrasonic transmission coverage 1 ultrasound attack range 1 UMTS RRC state transitions and timers 1 Unambiguous uniqueness 1 Unauthorized message injection 1 unaware-party detection 1 unaware-party labels 1 Unbounded device additions 1 Unclassified RTC traffic 1 Underrated Android applications 1 Undetected executable data leaks 1 Undocumented flaws in Android leak detectors 1 Undocumented manifest entities 1 unencrypted keystroke transmission 1 Unencrypted web API communication 1 unexpected photo uploading 1 Unique CSP policies 1 Unique records with all quasi-identifiers 1 uniqueness distribution estimation 1 Unity game-engine prevalence 1 Unix-domain-socket usage 1 unlearning effectiveness 1 unnoticed music perturbation 1 Unobservable covert TCP channel 1 Unprotected built-in defenses 1 unprotected ML models 1 unprotected model files 1 Unreachable retweeters 1 Unrecognized depicted faces 1 unrelated collection purposes 1 Unreliable Android maturity ratings 1 Unsafe CSP whitelists 1 Unsafe custom communication 1 Unsafe DOM and jQuery API usage 1 Unseen YouTube traffic 1 Unsupervised covert-channel detection 1 Untaged depicted users 1 Unwanted app families 1 Unwanted-app encounters 1 Update-support information availability 1 Update-support information versus sales 1 UPI users’ perceptions and behaviors 1 Uploader content consistency 1 Uploader content type 1 Urban-rural inequality 1 URL click disparity 1 URL crawling 1 URL propagation cascades 1 URL safety-checking evasion 1 URL-level collective detection 1 URL-rendering behavior 1 user check-in profiles 1 User credibility for security reporting 1 user differentiation 1 User emotional groups 1 user engagement impact 1 user geographic distribution 1 User geolocation 1 User ID enumeration 1 User identification 1 User ideology 1 User IP-address life spans 1 User positioning from coarse proximity data 1 User reviews as sales proxies 1 User satisfaction 1 user tag spoofing vulnerabilities 1 User trust and VPA usage behavior 1 User-ID verification failures 1 user-level inaccuracy variation 1 Users per IP address 1 Users per IPv6 prefix 1 VAC-flagged cheaters 1 Valid text-input generation 1 Validation correctness 1 Vegetation cover 1 venue-day deduplication 1 verbatim plagiarism 1 Verification-perception mismatch 1 Verified front-end vulnerabilities 1 Verified-account composition 1 Video inclusion attrition 1 video playback stuttering 1 Video quality degradation 1 Video view-count distribution 1 viewer comment explanations 1 viral crowdturfing campaigns 1 virtual machine escape 1 virtual-trailer extraction 1 visual cues of unawareness 1 Vocabulary coverage 1 vocabulary estimation 1 Voice-command availability violations 1 Voice-command blocking 1 Voice-command delay 1 Voice-search pollution 1 Void synthetic-speech detection 1 VoIP call quality 1 vouching delay 1 vulnerabilities in Android native libraries 1 Vulnerable Android apps 1 vulnerable authorization implementations 1 Vulnerable certificate-validation code 1 vulnerable IAP implementation 1 Vulnerable OSS usage 1 WAA over-the-air command recognition 1 Walking-based surge avoidance 1 Watermark robustness after model extraction 1 Watermark success on selected apps 1 weak ATM and POS RNGs 1 Weak substitute certificates 1 weak TLS ciphers 1 web affordability 1 Web API validation inconsistencies 1 Web knowledge-panel pollution 1 web-domain promotion 1 Web-download risk 1 Web-page inference 1 web-page topics 1 Web3 audit-information perceptions 1 Web3AuthGuard attack detection 1 webcam indicator LED bypass 1 WebMD disease-condition inference 1 webpage size and object complexity 1 website content 1 website defacement attacks 1 website-visit inference 1 website-visitor de-anonymization 1 WebView-launching QR readers 1 WebView-user-agent crawler support 1 WeChat master-key leakage 1 Weekly group-chat meetings 1 Weekly playtime variation 1 Weibo information cascades 1 WhatsApp account enumeration 1 WhatsApp account registration 1 WhatsApp evidence use in Swiss penal cases 1 whole-system leak mitigation 1 Widevine API and system-call tampering 1 WiFi-versus-3G viewing behavior 1 Wishlist product categories 1 Within-category app centralization 1 working copy protection bypass 1 WTA adversarial command recognition 1 X-Frame-Options clickjacking exposure 1 XGuard exploit mitigation 1 XGuard false positives 1 XGuard runtime overhead 1 Xrce vulnerabilities in cross-platform applications 1 YouTube account commerce 1 YouTube channel repurposing 1 YouTube content scale 1 YouTube data-center locations 1 YouTube streaming energy 1 YouTube uploader population 1 ZepScope warning accuracy 1 Zero-day web vulnerabilities 1 ZIP-bomb denial of service
Hand audits: the candidate sets and their measured precision
The family sets are regex candidate sets, so they were audited against the papers' own full text with scripts/platforms_audit.mjs, which prints whitespace-collapsed windows around each platform-name match. Samples are deterministic (every k-th row of the --list output, which is sorted by year then venue), so the audit is reproducible.
TikTok — full audit, all 7 candidates
| Verdict | Paper | Why |
|---|---|---|
| genuine | IEEE S&P 2024 A Picture is Worth 500 Labels [2West, Jack; Thiemt, Lea; Ahmed, Shimaa; Bartig, Maggie; Fawaz, Kassem; Banerjee, Suman (2024): "A Picture is Worth 500 Labels: A Case Study of Demographic Disparities in Local Machine Learning Models for Instagram and TikTok", in: Proceedings of the IEEE Symposium on Security and Privacy. (DOI)] | extracted and evaluated the on-device ML models shipped in the TikTok app |
| genuine | TheWebConf 2024 TikTok and the Art of Personalization [3Vombatkere, Karan; Mousavi, Sepehr; Zannettou, Savvas; Roesner, Franziska; Gummadi, Krishna P. (2024): "TikTok and the Art of Personalization: Investigating Exploration and Exploitation on Social Media Feeds", in: Proceedings of the ACM Web Conference. (DOI)] | five sock-puppet accounts driving the feed, plus TikTok-Api |
| genuine | CCS 2024 Modern problems require modern solutions [4Simko, Lucy; Hutchinson, Adryana; Isaac, Alvin; Fries, Evan; Sherr, Micah; Aviv, Adam J. (2024): ""Modern problems require modern solutions": Community-Developed Techniques for Online Exam Proctoring Evasion", in: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. (DOI)] | collected social-media video and comment data from TikTok and YouTube. The paper's own wording is "the qualitative analysis of 137 videos and 4,297 comments on TikTok (n = 120) and YouTube (n = 17)" — so 137 videos in total, of which 120 are TikTok, and the 4,297 comments are across both platforms. An earlier version of this row said “120 TikTok videos and 4,297 comments”, which silently reassigned the combined comment count to TikTok alone; corrected after review. |
| genuine | IEEE S&P 2026 Setting the Course, but Forgetting to Steer [5Karnam, Sai Keerthana; Dash, Abhisek; Das, Antariksh; Mousavi, Sepehr; Bechtold, Stefan; Gummadi, Krishna P.; Mukherjee, Animesh; Weber, Ingmar; Zannettou, Savvas (2026): "Setting the Course, but Forgetting to Steer: Analyzing Compliance with GDPR's Right of Access to Data by Instagram, TikTok, and Youtube", in: Proceedings of the IEEE Symposium on Security and Privacy. (DOI)] | GDPR right-of-access requests to TikTok from sock-puppet accounts |
| no — topic only | PETS 2023 Creative beyond TikToks | interview and diary study of adolescents; TikTok is the subject matter, not the measured system |
| no — topic only | PETS 2026 “The city isn't uploading me to TikTok” | interview study on data collection in urban public spaces; TikTok appears in the title quote |
| no — collision | PETS 2023 RAVEN | tool list contains "Tiktok"; the paper is enterprise IP address variation |
Precision 4/7 = 57%.
Twitter/X — every 10th of 142 = 15 audited
Genuine (11): CCS 2010 @spam (25 M URLs from Twitter) · NDSS 2012 WarningBird · TheWebConf 2013 Hierarchical geographical modeling · USENIX 2015 Vulnerability Disclosure in the Age of Social Media · IMC 2018 On the Origins of Memes [6Zannettou, Savvas; Caulfield, Tristan; Blackburn, Jeremy; Cristofaro, Emiliano De; Sirivianos, Michael; Stringhini, Gianluca; Suarez-Tangil, Guillermo (2018): "On the Origins of Memes by Means of Fringe Web Communities", in: Proceedings of the ACM Internet Measurement Conference. (DOI)] · PETS 2019 #DontTweetThis · TheWebConf 2019 Revisiting User Mobility … in LBSNs (collected Foursquare-tagged tweets from Twitter Public Streams) · CCS 2021 An Ontology-driven Knowledge Graph for Android Malware (academic Twitter API) · USENIX 2022 Automated Detection of Automated Traffic (5.1 M accounts via the public API) · TheWebConf 2023 Identifying Checkworthy CURE Claims on Twitter · TheWebConf 2023 Papageno Effect (2 M posts).
False positives (4), all the same failure mode — a reused Twitter-derived benchmark corpus, with no collection from the platform: TheWebConf 2022 Massive Text Normalization (Twitter/Reddit datasets) · TheWebConf 2024 Message Injection Attack on Rumor Detection (Twitter15/Twitter16) · TheWebConf 2025 Thematic-LM (TweetNLP model, Reddit data, Twitter only in a reference) · TheWebConf 2026 Cross-Modal Rationale Transfer (CrisisMMD).
Precision 11/15 = 73%. All four false positives are 2022 or later, which is why the content page warns that the recent Twitter/X counts are inflated relative to the earlier ones, and states the trend as a change in composition rather than in size.
Meta — every 10th of 151 = 16 audited
Genuine (11): CCS 2010 Detecting and characterizing social spam campaigns (3.5 M users' wall messages) · USENIX 2012 MyPageKeeper · CCS 2017 walk2friends (Instagram check-ins) · TheWebConf 2018 Tagvisor (239 k Instagram posts) · TheWebConf 2019 Auditing Offline Data Brokers via Facebook's Advertising Platform [7Venkatadri, Giridhari; Sapiezynski, Piotr; Redmiles, Elissa M.; Mislove, Alan; Goga, Oana; Mazurek, Michelle L.; Gummadi, Krishna P. (2019): "Auditing Offline Data Brokers via Facebook's Advertising Platform", in: Proceedings of the ACM Web Conference. (DOI)] · USENIX 2020 DELF [8Cohn-Gordon, Katriel; Damaskinos, Georgios; Neto, Divino; Cordova, Joshi; Reitz, Benoît; Strahs, Benjamin; Obenshain, Daniel; Pearce, Paul; Papagiannis, Ioannis (2020): "DELF: Safeguarding deletion correctness in Online Social Networks", in: Proceedings of the USENIX Security Symposium. (Link)] (Facebook-authored, own systems) · NDSS 2021 All the Numbers are US [9Hagen, Christoph; Weinert, Christian; Sendner, Christoph; Dmitrienko, Alexandra; Schneider, Thomas (2021): "All the Numbers are US: Large-scale Abuse of Contact Discovery in Mobile Messengers", in: Proceedings of the Network and Distributed System Security Symposium. (Link)] (WhatsApp crawling) · TheWebConf 2023 The Thin Ideology of Populist Advertising [10Capozzi, Arthur; Morales, Gianmarco De Francisci; Mejova, Yelena; Monti, Corrado; Panisson, André (2023): "The Thin Ideology of Populist Advertising on Facebook during the 2019 EU Elections", in: Proceedings of the ACM Web Conference. (DOI)] (Meta Ad Library, 45 k campaigns) · USENIX 2024 The Imitation Game [11Acharya, Bhupendra; Lazzaro, Dario; López-Morales, Efrén; Oest, Adam; Saad, Muhammad; Cinà, Antonio Emanuele; Schönherr, Lea; Holz, Thorsten (2024): "The Imitation Game: Exploring Brand Impersonation Attacks on Social Media Platforms", in: Proceedings of the USENIX Security Symposium. (Link)] · IMC 2025 Buy and Sale of Social Media Accounts [12Beluri, Mario; Acharya, Bhupendra; Khodayari, Soheil; Stivala, Giada; Pellegrino, Giancarlo; Holz, Thorsten (2025): "Exploration of the Dynamics of Buy and Sale of Social Media Accounts", in: Proceedings of the ACM Internet Measurement Conference. (DOI)] · TheWebConf 2026 Longitudinal Trends in Global Climate Change Discourse on Facebook [13Biswas, Md. Rafiul; Bessghaier, Mabrouka; Ibrahim, Shimaa; Mikros, George K.; Zaghouani, Wajdi (2026): "Longitudinal Trends in Global Climate Change Discourse on Facebook", in: Proceedings of the ACM Web Conference. (DOI)] (299,329 Facebook posts via CrowdTangle).
False positives (5): TheWebConf 2013 Google+ or Google-? (measures Google+; Facebook only in the framing) · CCS 2015 Perplexed Messengers from the Cloud (the Facebook client app is one of many analysed; the study is push clouds) · USENIX 2022 Pre-hijacked accounts (Facebook as an identity-provider example) · PETS 2023 Creative beyond TikToks (Facebook in related work) · TheWebConf 2025 Cross-Modal Transfer from Memes to Videos (Facebook Hateful Memes benchmark).
Precision 11/16 = 69%.
This row was wrong on first publication and was corrected by review. It read “every 10th of 151 = 15 audited … precision 10/15 = 67%”. A stride of 10 over 151 rows yields 16 samples (indices 0, 10, … 150), not 15, and the sixteenth — TheWebConf 2026 Longitudinal Trends in Global Climate Change Discourse on Facebook — was silently dropped. It is unambiguously genuine: the content page cites it two sections earlier for having collected 299,329 Facebook posts through CrowdTangle. So the audited sample is 16 and the precision is 11/16. TikTok (stride 1 over 7), Twitter/X (stride 10 over 142 → 15) and Amazon (stride 7 over 72 → 11) were re-checked and are correct. Found by the figures reviewer; the author had counted the sample by eye from a truncated terminal listing rather than from wc -l.
Amazon — every 7th of 72 = 11 audited
Genuine (4): IEEE S&P 2011 How to Shop for Free Online (analysed Amazon Payments as a cashier-as-a-service provider and found logic flaws; verified in full text) · CCS 2020 Dangerous Skills Got Certified [14Cheng, Long; Wilson, Christin; Liao, Song; Young, Jeffrey; Dong, Daniel; Hu, Hongxin (2020): "Dangerous Skills Got Certified: Measuring the Trustworthiness of Skill Certification in Voice Personal Assistant Platforms", in: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. (DOI)] (Alexa skill store) · TheWebConf 2024 Understanding GDPR Non-Compliance in Privacy Policies of Alexa Skills [15Liao, Song; Aldeen, Mohammed; Yan, Jingwen; Cheng, Long; Luo, Xiapu; Cai, Haipeng; Hu, Hongxin (2024): "Understanding GDPR Non-Compliance in Privacy Policies of Alexa Skills in European Marketplaces", in: Proceedings of the ACM Web Conference. (DOI)] · PETS 2025 Erasing the Echo (Alexa data deletion).
False positives (7): CCS 2018 Assessing Non-Visual SSL Certificates · TheWebConf 2020 Snippext (Amazon Reviews benchmark) · IEEE S&P 2022 Time-Print (USB drives purchased on Amazon — verified in full text: "a generic device found on Amazon", "purchased by users on Amazon as of September 2020") · IEEE S&P 2023 Breaking Security-Critical Voice Authentication (evaluates Amazon Connect Voice ID, a hosted ML product; scored mlservice, and a reasonable person could score it subject) · TheWebConf 2023 CaML · PETS 2024 DeTorrent · TheWebConf 2026 FeedGuard (Amazon dataset benchmark).
Precision 4/11 = 36% — the lowest of the four, and the direct reason no Amazon sub-page was written. The genuine four also split into two unrelated objects: the Alexa voice/skill ecosystem (3) and an Amazon web service (1).
Quotes spot-checked against the source
Every figure the content page attributes to a paper is listed in scripts/platforms_quotecheck.mjs with the phrase that must appear in that paper's paper.cols.txt. Whitespace is collapsed on both sides first.
- platforms_quotecheck-output.txt
PASS NDSS 2026 "we discovered a total of 3,546,479,731 accounts" PASS NDSS 2026 "More than 57 % of world users have a public profile picture" PASS IMC 2024 "only 7.7% of undeclared political ads" PASS IMC 2024 "60.4% of ads moderated by Meta did not align" PASS IMC 2024 "Digital Services Act" PASS WWW 2024 "exploits real users' interests in between 30% and 50%" PASS PETS 2026 "We found 17,842 products that Amazon restricted" PASS IMC 2023 "the Mastodon accounts of 136,009 Twitter users" PASS PETS 2026 "48, 511 ad explanations collected across four platforms" PASS PETS 2026 "Who Targets Me" PASS WWW 2026 "Bad Recommendation rate was about 2.3%" PASS USENIX 2025 "very small for the Basic tier" PASS WWW 2026 "the tool was discontinued in 2024" PASS WWW 2025 "(the now defunct) Crowdtangle" PASS WWW 2023 "Meta (previously Facebook) Ad Library" PASS WWW 2019 "over 90% of targetable Facebook identities" PASS IMC 2021 "throttling is triggered upon observing Twitter-related domains (*.twimg.com, twitter.com, t.co) in the SNI" PASS NDSS 2021 "10 % of all US mobile phone numbers for WhatsApp and 100 % for Signal" PASS IEEE-SP 2024 "age prediction fails drastically for individuals below 19" PASS IEEE-SP 2026 "all three platforms fail to report this information" PASS IMC 2025 "of social media platforms in blocking these accounts was 19.71%" PASS IMC 2025 "All 11,457 2,259 19.71" PASS NDSS 2026 "order of magnitude (0.0069 vs. 0.084)" PASS NDSS 2026 "been restricted since June 2023" PASS CCS 2024 "137 videos and 4,297 comments on TikTok" PASS USENIX 2025 "now replaced by the Meta Content Library" 26 pass, 0 fail, of 26 checks
Three checks failed on the first run, and all three were column-splice artefacts of two-column PDF reading order, not fabrications:
| Paper | What failed | Resolution |
|---|---|---|
| IMC 2021 Throttling Twitter [16Xue, Diwen; Ramesh, Reethika; S, Valdik S.; Evdokimov, Leonid; Viktorov, Andrey; Jain, Arham; Wustrow, Eric; Basso, Simone; Ensafi, Roya (2021): "Throttling Twitter: an emerging censorship technique in Russia", in: Proceedings of the ACM Internet Measurement Conference. (DOI)] | the extraction's paraphrase "only t.co and twitter.com are throttled" is not in the paper | replaced with the paper's own wording, which is about SNI matching: "throttling is triggered upon observing Twitter-related domains (*.twimg.com, twitter.com, t.co) in the SNI". The page quotes the paper, not the extraction. |
| IMC 2025 Buy and Sale of Social Media Accounts [12Beluri, Mario; Acharya, Bhupendra; Khodayari, Soheil; Stivala, Giada; Pellegrino, Giancarlo; Holz, Thorsten (2025): "Exploration of the Dynamics of Buy and Sale of Social Media Accounts", in: Proceedings of the ACM Internet Measurement Conference. (DOI)] | the 19.71% sentence is interleaved with the adjacent column | split into two contiguous fragments, both of which pass: the sentence tail, and the table row "All 11,457 2,259 19.71" |
| NDSS 2026 Revealing The Secret Power [17Galeazzi, Alessandro; Paudel, Pujan; Conti, Mauro; Cristofaro, Emiliano De; Stringhini, Gianluca (2026): "Revealing The Secret Power: How Algorithms Can Influence Content Visibility on Twitter/X", in: Proceedings of the Network and Distributed System Security Symposium. (Link)] | "approximately eight times for Ukraine-Russia" is spliced ("approxibeen able ... mately eight times") | replaced with two contiguous fragments: "order of magnitude (0.0069 vs. 0.084)" and "been restricted since June 2023" |
After those replacements: 26 checks, 26 pass, 0 fail.
One further note on the corpus text: some IMC volumes in paper.cols.txt include the published reviewer comments (“Reviewer #2 Strengths: …”). A keyword probe over full text can therefore hit a reviewer's sentence rather than the authors'. Two of the early rate-limit examples in the probe output are exactly that. It does not change the paper counts materially at this scale, but a probe designed to measure what authors say would need to strip those sections.
External sources
Two Claude Sonnet sub-agents were asked for the current status of platform access routes and of the DSA/legal position, with instructions to fetch primary sources and to flag anything they could not verify. Every claim that reached the content page was then re-fetched by the main agent. The sub-agents' unverified items are listed below as unverified.
Verified by direct fetch, 2026-08-27
| Claim on the page | Primary source | Verbatim quote | Date on the page |
|---|---|---|---|
| X API is pay-per-usage, $0.005/Post read, capped at 3 M Post reads per month, no academic tier | https://docs.x.com/x-api/getting-started/pricing | "The X API uses pay-per-usage pricing. No subscriptions—pay only for what you use."; "Pay-per-usage plans are capped at 3 million Post reads per monthly billing cycle." | none shown |
| CrowdTangle withdrawn 14 August 2024 | https://transparency.meta.com/researchtools/other-datasets/crowdtangle/ | "As of August 14, 2024, CrowdTangle is no longer available." | "UPDATED AUG 16, 2024" |
| Meta Content Library scope and the 100-follower threshold | https://transparency.meta.com/researchtools/meta-content-library/ | "posts that appear on public profiles that are either verified or that have 100 or more followers"; "All applications are independently reviewed by the Secure Data Access Center (CASD ...)" | "UPDATED APR 30, 2026" |
| Meta Content Library eligibility criteria | https://developers.facebook.com/docs/content-library-and-api/get-access | "Dedicated to the pursuit of education and research", "Accredited", "Qualified to grant academic degrees", "A not-for-profit endeavor" | none shown |
| TikTok Research Tools regions, eligibility, turnaround, data | https://developers.tiktok.com/products/research-api/ | "Academic institutions in the US, EEA, UK or Switzerland"; "Not-for-profit and/or independent research institution, organization, association, or body in the EU"; "You can typically expect to hear back from us within 4 weeks" | none shown |
| TikTok Commercial Content Library is EU-only | https://developers.tiktok.com/products/commercial-content-api/ | "in this phase we are ONLY including data from EU countries" | none shown |
| YouTube Researcher Program exists and is separate from a quota increase | https://research.youtube/how-it-works/ | "scaled, expanded access to global video metadata across the entire public YouTube corpus via our Data API" | none shown |
| YouTube Data API default quota | https://developers.google.com/youtube/v3/getting-started#quota | "a default quota allocation of 100 search.list calls, 100 videos.insert calls, and 10,000 units per day combined for all other endpoints" | none shown |
| Amazon PA-API 5.0 deprecated; calls return HTTP 403 | https://affiliate-program.amazon.com/creatorsapi/docs/en-us/paapiv5-deprecation | "The Amazon Product Advertising API 5.0 (PA-API 5) has been deprecated and is being replaced by the Creators API"; "receive an HTTP 403 Forbidden response with an AccessDeniedException" | none shown |
| Commission Delegated Regulation (EU) 2025/2050, of 1 July 2025, entry into force rule | https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202502050 (CELEX 32025R2050) | "laying down the technical conditions and procedures under which providers of very large online platforms and of very large online search engines are to share data with vetted researchers"; "This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union."; "Done at Brussels, 1 July 2025." | n/a |
| X fined €120 M on 5 December 2025; researcher data access is one of three grounds | https://digital-strategy.ec.europa.eu/en/news/commission-fines-x-eu120-million-under-digital-services-act | "X's terms of service prohibit eligible researchers from independently accessing its public data, including through scraping."; "This is the first non-compliance decision under the DSA." | "Publication 05 December 2025", "Last update 16 January 2026" |
| Current VLOP designation list, including WhatsApp | https://digital-strategy.ec.europa.eu/en/policies/list-designated-vlops-and-vloses | list includes "WhatsApp Ireland Ltd.", "X Internet Unlimited Company(XIUC)", "Meta Platforms Ireland Limited (MPIL)", "TikTok Technology Limited", "Amazon EU S.à.r.l." | "Information updated on 24 July 2026" |
help.crowdtangle.com is gone | DNS | net::ERR_NAME_NOT_RESOLVED | 2026-08-27 |
| X pay-per-use launched 6 Feb 2026; Basic and Pro remain for existing subscribers; Owned Reads added 20 Apr 2026 at $0.001 | https://docs.x.com/changelog | "Today, we officially launched X API Pay-Per-Use pricing"; "Basic and Pro plans remain available, and existing subscribers can opt in to Pay-Per-Use."; "Effective April 20, 2026, we introduced new Owned Reads pricing at $0.001 per resource" | entries dated Feb 6, 2026 and Apr 16, 2026 |
| Reg. (EU) 2025/2050 was published in the OJ on 9 October 2025, so it has been in force since 29 October 2025 | the same EUR-Lex record | "OJ L, 2025/2050, 9.10.2025" | n/a |
| The DSA Data Access Portal accepts applications from 29 October 2025 and publishes a register of vetted-researcher projects | https://data-access.dsa.ec.europa.eu/home (headless browser) | "You can send applications as of 29 October 2025."; "Find out more about ongoing research projects conducted by vetted researchers who have access to data under Article 40 of the Digital Services Act." | none shown |
| Pushshift live access is moderator-only, by Reddit approval, for moderation use only | https://support.reddithelp.com/hc/en-us/articles/16470271632404-Pushshift-Access-Request (headless browser; Cloudflare-walled to curl) | "which will be reinstated for verified Reddit moderators"; "Each moderator will also need explicit approval from Reddit, and the use of Pushshift will be limited to moderation use cases only." | "Updated 1 year ago" |
| TikTok's non-academic EU pathway is a beta | https://developers.tiktok.com/products/research-api/ | "We are currently beta testing this service with select researchers in the US, UK, Switzerland, Norway, Iceland and Liechtenstein." — the sentence sits immediately after the EU not-for-profit clause | none shown |
Two of these pages are JavaScript-only and were fetched with Playwright's own Chromium rather than curl (transparency.meta.com, developers.facebook.com; curl returns an error page for the second). The DSA data-access portal at https://data-access.dsa.ec.europa.eu/ renders nothing without JavaScript — the page title "DSA - Data Access Portal" is all that could be confirmed, and the content page says only that the portal exists.
Reported by a sub-agent, NOT verified, NOT used on the page
| Claim | Why it is not on the page |
|---|---|
| Official Journal publication date of Reg. 2025/2050 (9 October 2025) and entry into force (29 October 2025) | EUR-Lex confirmed the instrument, its adoption date and the twentieth-day rule; we did not confirm the OJ date itself, so the page states the rule and not the date |
| Legacy X API Basic ($200/month) and Pro ($5,000/month) tiers, and their closure | developer.x.com returns HTTP 402 and the official forum thread returns 403. The current pricing page does not mention tiers, so the page describes only pay-per-usage |
| Exact date the X Academic Research track was removed | the corroborating forum thread is 403. The page instead quotes a 2026 paper's own statement that academic access has "been restricted since June 2023" |
| Reddit Data API pricing ($0.24/1,000 calls), rate limits (100 QPM OAuth), and Pushshift's current status | every Reddit-owned domain refused the fetch (403 or unreachable). The page makes no claim about Reddit pricing or limits; it reports only the corpus counts for Pushshift and the Reddit API |
| Ad Library coverage rules (political ads worldwide for 7 years, non-political EU-only for 1 year) and the government-ID requirement | transparency.meta.com ad-library pages did not yield the text; the page says only that an ad archive contains ads that ran |
| hiQ Labs v. LinkedIn final consent judgment, Meta v. Bright Data, X Corp. v. Bright Data, Van Buren | no primary opinion could be read: CourtListener and Justia 403, the SCOTUS and Ninth Circuit PDFs did not parse. The two sub-agents also disagreed on which Bright Data case is the relevant one. Not published |
| ICPSR/SOMAR compute fees for Meta Content Library access from January 2026 | no primary source found |
| Google Ads Transparency Center researcher API | no primary Google page describes one; the page makes no claim |
| X has appealed the €120 M DSA fine (reported as filed at the EU General Court on 16 February 2026) | reported by the currency reviewer from secondary press; no case number could be confirmed from a primary Curia document. Not published — the page presents the decision as the Commission published it and does not claim finality either way. This is the single most likely thing on the page to go out of date first |
| DSA Art. 40(12) has been enforced directly by researchers in German courts — Democracy Reporting International v X, reported as LG Berlin II, 6 February 2025 (41 O 140/25), and a Kammergericht order of 17 February 2026 granting API access to 30 June 2026 and holding that Art. 40(12) confers an individually enforceable right | reported by the currency reviewer; we tried to verify it. democracy-reporting.org is Cloudflare-walled even to a headless browser, the Columbia Global Freedom of Expression search did not surface the case, and the cited German legal blog's February 2026 archive does not contain it. Not published. If true it is the most important thing missing from the page, because it would mean the “no worked example of Art. 40” claim holds only for published papers, not for practice. What would close it: the Kammergericht order itself, or DRI's case page fetched from a network Cloudflare does not challenge |
| Amazon Conditions of Use anti-scraping clause | amazon.com/gp/help/… returned HTTP 503 twice |
Rejected sources
- Law-firm client alerts and legal-blog summaries for US case outcomes (Proskauer, Morgan Lewis, MoFo, Skadden, Privacy World and others). Consistent across sources, but a methods wiki citing a case outcome should cite the opinion. Rejected; the topic is handled by pointing the reader at their institution.
- Search-result AI summaries giving an X API cap of 2 million posts/month and a February 2026 rollout date. The primary docs page says 3 million and shows no date. Rejected in favour of the primary page. This is the exact shape of the error: a confident secondary number, close enough to the real one to survive review.
about.fb.comCrowdTangle announcement (2024/03 URL) — returns Meta's 404 page. Rejected in favour of the transparency-centre page, which carries the date and the sentence.- A claimed “first vetted-researcher decisions expected late February 2026” milestone, surfaced only in a search summary with no quotable primary sentence. Rejected.
support.alexa.comfor the Alexa retirement dates — the domain no longer resolves. The page does not restate those dates; they are already on website_selection.
What could not be established
- Whether any paper anywhere has published through the DSA Article 40 vetted-researcher route. Zero in this corpus. The corpus is seven venues; ICWSM, CHI, FAccT and the communications journals are not in it, and that is where such a paper would most plausibly appear first. This is a genuine gap in what this page can say, not a finding about the world.
- Why platform-subject papers state authentication state less often (65.8% vs 72.1% of all papers with a crawl configuration) even though the login wall matters more to them. The difference is 6.3 points on 260 papers; it could be noise. Not published as a finding, only as the two figures.
- Whether the Twitter/X decline is caused by the API closing. The share was already down to 1.9% in 2016–2018, years before the restriction. The page says so explicitly rather than drawing the tempting line.
- Whether Art. 40(12) has already been enforced through national courts. A reviewer reported a German line of cases (Democracy Reporting International v X) that would mean the route has been exercised in practice even though no paper here uses it. We could not verify it from a primary document — see the unverified table above. This is the biggest known hole in the page.
- The real cost of a metered-API study. No paper in the corpus publishes its API spend. The arithmetic on the page (1 M posts = $5,000) is ours, from the vendor's published unit price, and is labelled as such.
- Whether reused corpora still describe the platform. 383 of 897 platform papers name an existing dataset, and 208 name one with no primary collection of their own; nobody in the corpus tests whether conclusions from a 2019 Twitter corpus hold for X in 2026. Listed as an open question.
Mistakes and near-misses in this run
Recorded because they are the part with reuse value.
- A concurrent-edit race gave a probe the wrong denominator.
platforms_fulltext.mjsobtains the platform-subject key set by shelling out toplatforms_report.mjs --keys. It ran whileplatforms_report.mjswas being rewritten and got 172 keys instead of 897, then computed every percentage on 172. Nothing errored; the output looked normal. Fixed by addingif (listed.size < 800) throw— a fail-loud guard, not a retry. - The role filter was missing at the call site.
tagsOf()returns{family, role}; the report accepted every tag it returned. Amazon read 923 papers for one run. Fixed, and the number is recorded above. - Four probe regexes were too wide (see the table above), and one had to be abandoned entirely after a hand audit found 1 on-point hit in 19.
- Bare wiki links resolved inside the
design:namespace.[[Design]],[[start]]and[[Artifacts]]rendered as red links todesign:design,design:startanddesign:artifacts. Caught by diffingclass="wikilink2"out of the rendered DOM, not by reading the source. Fixed with a leading colon. - The bibliography cache served a stale parse. After appending 24 entries, the first render resolved only some citekeys. Fixed with
?purge=trueonliterature:bibliographyand then ondesign:platforms; verified by counting <dt> entries in the rendered reference list (26) against distinct {[key]} markers on the page (26). - LaTeX accent escapes render as HTML entities.
Beno\^{i}tcame out asBenoˆitin the reference list. The five new entries with diacritics were rewritten in UTF-8. Pre-existing entries elsewhere in the bibliography have the same problem and were left alone. - A multi-valued field was published as an exclusive one. The first draft read
383 (42.7%) worked from an existing dataset rather than collecting anything themselves — a higher share than live collection (346, 38.6%). Both halves were wrong:temporal.modeis multi-valued, so 175 of the 383 also name a primary-collection mode, only 208 name an existing dataset and nothing else, and 628 (70.0%) name some primary collection. Caught by the author before review, by asking what the exclusive split was;platforms_report.mjsnow prints it so the next reader cannot make the same mistake. - An audit sample was miscounted by one, in the direction that lowered the precision. A stride of 10 over Meta's 151 candidates gives 16 samples, not 15; the sixteenth was dropped and is genuine, so the published precision was 67% instead of 69%. The author counted the sample from a truncated terminal listing instead of
wc -l. Found by review, not by the number guard — which passed, because “67” happens to appear in an unrelated per-year denominator elsewhere in the report. Explicit ALLOW entries for all four audit precisions have since been added toscripts/check_page_numbers.mjsso the next change to them is actually guarded rather than passing by coincidence. - A combined figure was reassigned to one platform. This log said CCS 2024 “collected 120 TikTok videos and 4,297 comments”; the paper says 137 videos in total, of which 120 are TikTok, and the 4,297 comments span TikTok and YouTube. Found by review. The quote-check script had the right phrase all along and passed — the error was in the prose beside it, which is exactly the gap the number guard cannot see.
- A vendor fact was stale within the same page. The first version said “the Basic tier the paper worked around no longer exists”. X's own changelog says the opposite: pay-per-use launched 6 February 2026 and “Basic and Pro plans remain available” to existing subscribers. Found by the currency reviewer. The lesson is the page's own: an access-route claim needs a dated primary source even when it is only an aside.
- A quote was attributed to the wrong paper. The Denominator problem bullet on sampled streams cited
hagen2021_numbers(NDSS 2021, All the Numbers are US) for"the 1% streaming API that Twitter provides to vetted researchers". That paper is about WhatsApp and Signal phone-number enumeration and contains no occurrence of the word “Twitter” at all. The quote belongs to a different NDSS 2021 paper, To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media, which the author had read in the same probe output and confused with it. Found by the citations reviewer. Fixed by addingkaleli2021_humanto the bibliography and re-citing; two quote checks for it were added toplatforms_quotecheck.mjs. This is the worst class of error on the page: a quote check that only verifies “does this phrase exist somewhere in the corpus” would have passed it, and the one here passed because the phrase was never in the check list at all. Every quote on a page belongs in the check list, not just the numbered figures. - A cross-platform range omitted the platform at the top of it. The page reported blocking efficacy “from 5.02% (YouTube) to 46.41% (Instagram)” across [12Beluri, Mario; Acharya, Bhupendra; Khodayari, Soheil; Stivala, Giada; Pellegrino, Giancarlo; Holz, Thorsten (2025): "Exploration of the Dynamics of Buy and Sale of Social Media Accounts", in: Proceedings of the ACM Internet Measurement Conference. (DOI)]'s five platforms — leaving out TikTok, which is at or above Instagram. The paper's own summary is
"TikTok and Instagram demonstrated the highest detection efficacy at 48%, whereas YouTube and Facebook showed the lowest efficacy at just 5%"; its Table 8 gives TikTok 816 of 1,700, and the efficacy cell for that row is lost to a column splice, which is how it came to be dropped. Found by the citations reviewer. Fixed, with the paper's prose figure quoted rather than a recomputed one. - No accidental exposure. No credentials, participant data or unpublished material was written to the wiki. The only non-public thing touched was
.envfor the JSON-RPC credentials, read byscripts/dw.mjs.
Observations for whoever maintains the shared bibliography
Found incidentally while checking this page's citations. None of these keys are used by this page; they are recorded because a key-string collision check does not find them.
| Duplicate pair | Note |
|---|---|
lerner2016internet / lerner2016_internet | same paper under two keys |
bouhoula2024automated / bouhoula2024_automated | same |
fouad2022my / fouad2022_cookie | same |
bottger2025_regional / boettger2025_regional | same, transliteration variant |
ahmad2026_ipfp / ahmad2026_more | same |
Also: biswas2026_longitudinal's DOI 10.1145/3774904.3793026 did not resolve at doi.org or via the CrossRef API on 2026-08-27, although the title and author list check out against the ACM listing. Almost certainly registration lag on a TheWebConf 2026 paper rather than a wrong DOI, but it is unverified as of this run.
And a corpus trap worth knowing: data/fulltext/2024/IMC/beyond-the-guidelines-.../paper.cols.txt contains a null byte, so plain grep treats the file as binary and reports no match for a phrase that is present. Use grep -a, or read it from a language runtime. Every script on this page reads the file through Node, so none of the published figures were affected — but a hand-check with grep would have produced a false negative. Same family as the known corpus under-count trap.
Review log
Four reviewers, each given the page text, the report scripts and their unedited output, and these notes, and each told explicitly that the author's context may not be exhaustive.
Four reviewers, each given the page text, the report scripts and their unedited output, and these notes, and each told explicitly that the author's context may not be exhaustive. Three focused passes ran in parallel first; the generic pass ran afterwards against the corrected page. Rejections are recorded as fully as fixes — they are the only record of whether a reviewer earned its slot.
Reviewer 1 — figures against the scripts (Claude Sonnet)
| Finding | Verdict | Action |
|---|---|---|
| Meta audit sample is 16, not 15 — a stride of 10 over 151 rows yields indices 0…150 — and the dropped 16th ([13Biswas, Md. Rafiul; Bessghaier, Mabrouka; Ibrahim, Shimaa; Mikros, George K.; Zaghouani, Wajdi (2026): "Longitudinal Trends in Global Climate Change Discourse on Facebook", in: Proceedings of the ACM Web Conference. (DOI)]) is genuine, so precision is 11/16 = 69%, not 10/15 = 67% | accepted, reproduced with wc -l | fixed on both pages; the dropped paper added to the genuine list; TikTok, Twitter/X and Amazon strides re-checked and correct |
| This log said CCS 2024 collected “120 TikTok videos and 4,297 comments”; the paper says 137 videos total (120 TikTok + 17 YouTube) with the comments spanning both | accepted | fixed, with the paper's own sentence quoted |
| The number guard passes the three other audit precisions only by coincidence — “57” matches inside an unrelated WhatsApp quote, “67” inside a per-year denominator, “73” inside the artifact table — so a future change to them would pass silently | accepted, and the more useful of its findings | explicit ALLOW entries added for all four audit precisions, each naming its numerator and denominator |
All four committed *-output.txt files reproduce byte-for-byte, including a full re-run of the 7-minute full-text probe; check_page_numbers.mjs returns OK; every figure in Measured results you can cite verified independently against paper.cols.txt and population.n | confirmation, no action | — |
Reviewer 2 — citations and quotes (Claude Sonnet)
| Finding | Verdict | Action |
|---|---|---|
The "1% streaming API that Twitter provides to vetted researchers" quote was attributed to [9Hagen, Christoph; Weinert, Christian; Sendner, Christoph; Dmitrienko, Alexandra; Schneider, Thomas (2021): "All the Numbers are US: Large-scale Abuse of Contact Discovery in Mobile Messengers", in: Proceedings of the Network and Distributed System Security Symposium. (Link)], which contains no occurrence of “Twitter”; it belongs to a different NDSS 2021 paper | accepted — the most serious finding of the review | re-cited to [18Kaleli, Beliz; Kondracki, Brian; Egele, Manuel; Nikiforakis, Nick; Stringhini, Gianluca (2021): "To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media", in: Proceedings of the Network and Distributed System Security Symposium. (Link)], new bibliography entry, two quote checks added |
| The cross-platform blocking range omitted TikTok, which is at the top of it, not absent from it | accepted | fixed in both places, quoting the paper's own 48% summary |
biswas2026_longitudinal's DOI does not resolve at doi.org or CrossRef | accepted as an observation, not a defect — title and authors check out, almost certainly registration lag | recorded above rather than changing the entry |
| Five duplicate-key pairs elsewhere in the shared bibliography, none used by this page | accepted as an observation | recorded above for the bibliography's maintainer |
beyond-the-guidelines's paper.cols.txt contains a null byte, so plain grep silently reports no match | accepted as an observation | recorded above; no published figure affected, since every script reads through Node |
| All 26 content-page and 17 provenance-page citekeys resolve; all 24 new entries' authors, titles, years and DOIs verified, including the eight fetched by hand from landing pages; all 13 footnoted URLs fetched and their quotes confirmed, including the JS-only Meta and DSA pages | confirmation, no action | — |
Reviewer 3 — external currency (Claude Sonnet)
| Finding | Verdict | Action |
|---|---|---|
| The page said “the Basic tier the paper worked around no longer exists”. X's changelog says pay-per-use launched 6 February 2026 and “Basic and Pro plans remain available” to existing subscribers | accepted | rewritten, with both changelog entries quoted and dated; the point that the model changed twice inside 2026 is now made explicitly |
| Pushshift was labelled “current in practice”. Reddit's own moderator page says access is reinstated only for approved moderators and “limited to moderation use cases only” | accepted | re-labelled historical-for-researchers in three places, with the primary quote; the page now says a paper citing Pushshift is citing a historical dump |
| TikTok's non-academic EU pathway is a beta, not open | accepted | the beta sentence is now quoted rather than the eligibility asserted |
| The OJ publication date (9 October 2025) and entry into force (29 October 2025) could be closed off, and the DSA portal states applications open from 29 October 2025 and publishes a register of vetted-researcher projects | accepted, re-verified by the author against EUR-Lex and the portal | both dates and the register are now on the page; the register is named as where the missing worked example will first appear |
| X has appealed the €120 M fine (reported as filed 16 February 2026) | not published — no primary Curia document could be found | recorded in the unverified table |
| DSA Art. 40(12) has been enforced directly by researchers in German courts (Democracy Reporting International v X) | not published — three independent verification attempts failed; see the unverified table | recorded, with what would close it. If true it is the largest hole in the page |
| All 13 previously verified URLs still live with their quotes unchanged; YouTube, Meta and Amazon claims unchanged | confirmation, no action | — |
Reviewer 4 — generic, no checklist (Claude Fable)
Still running as this revision is saved; its findings are added in the same sitting.
Related
- platforms — the page these notes are for.
- corpus — the corpus, the selection funnel, and the caveats that apply to every page built on it.
- design — the index of provenance pages for the
design:namespace.
- [1]
- McCrosky, Jesse; Malla, Ranadheer; Tanskanen, Aapo; Camargo, Chico Q. (2026): "Does This Button Work? Investigating YouTube's Ineffective User Controls", in: Proceedings of the ACM Web Conference. (DOI)
- [2]
- West, Jack; Thiemt, Lea; Ahmed, Shimaa; Bartig, Maggie; Fawaz, Kassem; Banerjee, Suman (2024): "A Picture is Worth 500 Labels: A Case Study of Demographic Disparities in Local Machine Learning Models for Instagram and TikTok", in: Proceedings of the IEEE Symposium on Security and Privacy. (DOI)
- [3]
- Vombatkere, Karan; Mousavi, Sepehr; Zannettou, Savvas; Roesner, Franziska; Gummadi, Krishna P. (2024): "TikTok and the Art of Personalization: Investigating Exploration and Exploitation on Social Media Feeds", in: Proceedings of the ACM Web Conference. (DOI)
- [4]
- Simko, Lucy; Hutchinson, Adryana; Isaac, Alvin; Fries, Evan; Sherr, Micah; Aviv, Adam J. (2024): ""Modern problems require modern solutions": Community-Developed Techniques for Online Exam Proctoring Evasion", in: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. (DOI)
- [5]
- Karnam, Sai Keerthana; Dash, Abhisek; Das, Antariksh; Mousavi, Sepehr; Bechtold, Stefan; Gummadi, Krishna P.; Mukherjee, Animesh; Weber, Ingmar; Zannettou, Savvas (2026): "Setting the Course, but Forgetting to Steer: Analyzing Compliance with GDPR's Right of Access to Data by Instagram, TikTok, and Youtube", in: Proceedings of the IEEE Symposium on Security and Privacy. (DOI)
- [6]
- Zannettou, Savvas; Caulfield, Tristan; Blackburn, Jeremy; Cristofaro, Emiliano De; Sirivianos, Michael; Stringhini, Gianluca; Suarez-Tangil, Guillermo (2018): "On the Origins of Memes by Means of Fringe Web Communities", in: Proceedings of the ACM Internet Measurement Conference. (DOI)
- [7]
- Venkatadri, Giridhari; Sapiezynski, Piotr; Redmiles, Elissa M.; Mislove, Alan; Goga, Oana; Mazurek, Michelle L.; Gummadi, Krishna P. (2019): "Auditing Offline Data Brokers via Facebook's Advertising Platform", in: Proceedings of the ACM Web Conference. (DOI)
- [8]
- Cohn-Gordon, Katriel; Damaskinos, Georgios; Neto, Divino; Cordova, Joshi; Reitz, Benoît; Strahs, Benjamin; Obenshain, Daniel; Pearce, Paul; Papagiannis, Ioannis (2020): "DELF: Safeguarding deletion correctness in Online Social Networks", in: Proceedings of the USENIX Security Symposium. (Link)
- [9]
- Hagen, Christoph; Weinert, Christian; Sendner, Christoph; Dmitrienko, Alexandra; Schneider, Thomas (2021): "All the Numbers are US: Large-scale Abuse of Contact Discovery in Mobile Messengers", in: Proceedings of the Network and Distributed System Security Symposium. (Link)
- [10]
- Capozzi, Arthur; Morales, Gianmarco De Francisci; Mejova, Yelena; Monti, Corrado; Panisson, André (2023): "The Thin Ideology of Populist Advertising on Facebook during the 2019 EU Elections", in: Proceedings of the ACM Web Conference. (DOI)
- [11]
- Acharya, Bhupendra; Lazzaro, Dario; López-Morales, Efrén; Oest, Adam; Saad, Muhammad; Cinà, Antonio Emanuele; Schönherr, Lea; Holz, Thorsten (2024): "The Imitation Game: Exploring Brand Impersonation Attacks on Social Media Platforms", in: Proceedings of the USENIX Security Symposium. (Link)
- [12]
- Beluri, Mario; Acharya, Bhupendra; Khodayari, Soheil; Stivala, Giada; Pellegrino, Giancarlo; Holz, Thorsten (2025): "Exploration of the Dynamics of Buy and Sale of Social Media Accounts", in: Proceedings of the ACM Internet Measurement Conference. (DOI)
- [13]
- Biswas, Md. Rafiul; Bessghaier, Mabrouka; Ibrahim, Shimaa; Mikros, George K.; Zaghouani, Wajdi (2026): "Longitudinal Trends in Global Climate Change Discourse on Facebook", in: Proceedings of the ACM Web Conference. (DOI)
- [14]
- Cheng, Long; Wilson, Christin; Liao, Song; Young, Jeffrey; Dong, Daniel; Hu, Hongxin (2020): "Dangerous Skills Got Certified: Measuring the Trustworthiness of Skill Certification in Voice Personal Assistant Platforms", in: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. (DOI)
- [15]
- Liao, Song; Aldeen, Mohammed; Yan, Jingwen; Cheng, Long; Luo, Xiapu; Cai, Haipeng; Hu, Hongxin (2024): "Understanding GDPR Non-Compliance in Privacy Policies of Alexa Skills in European Marketplaces", in: Proceedings of the ACM Web Conference. (DOI)
- [16]
- Xue, Diwen; Ramesh, Reethika; S, Valdik S.; Evdokimov, Leonid; Viktorov, Andrey; Jain, Arham; Wustrow, Eric; Basso, Simone; Ensafi, Roya (2021): "Throttling Twitter: an emerging censorship technique in Russia", in: Proceedings of the ACM Internet Measurement Conference. (DOI)
- [17]
- Galeazzi, Alessandro; Paudel, Pujan; Conti, Mauro; Cristofaro, Emiliano De; Stringhini, Gianluca (2026): "Revealing The Secret Power: How Algorithms Can Influence Content Visibility on Twitter/X", in: Proceedings of the Network and Distributed System Security Symposium. (Link)
- [18]
- Kaleli, Beliz; Kondracki, Brian; Egele, Manuel; Nikiforakis, Nick; Stringhini, Gianluca (2021): "To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media", in: Proceedings of the Network and Distributed System Security Symposium. (Link)
